Run zizmor static analysis on GitHub Actions workflows to detect
potential security vulnerabilities in CI/CD configuration.
See: https://docs.zizmor.sh/
Run CodeQL static analysis on GitHub Actions workflows to detect
potential security vulnerabilities in CI/CD configuration.
Scheduled weekly and on pushes/PRs to main branch.