Add zizmor as gh action

.github/workflows/ci.yml

@@ -470,6 +470,20 @@ jobs:
           flags: Cython,${{ steps.get-version.outputs.version }}
           fail_ci_if_error: true
 
+  zizmor:
+    name: Run zizmor 🌈
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write # Required for upload-sarif (used by zizmor-action) to upload SARIF files.
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+
+      - name: Run zizmor 🌈
+        uses: zizmorcore/zizmor-action@v0.6.1
+
   # https://github.com/marketplace/actions/alls-green#why
   check:  # This job does nothing and is only used for the branch protection
 
@@ -482,6 +496,7 @@ jobs:
       - macOS
       - Alpine
       - Cython
+      - zizmor
 
     runs-on: ubuntu-latest
 

.pre-commit-config.yaml

@@ -45,10 +45,6 @@ repos:
     rev: v1.0.2
     hooks:
       - id: sphinx-lint
-  - repo: https://github.com/woodruffw/zizmor-pre-commit
-    rev: v1.28.0
-    hooks:
-      - id: zizmor
   - repo: local
     hooks:
       - id: regenerate-files