Consider zizmor for static analysis of GitHub Actions #46
Description
I just came across a project named zizmor.
The latest pypa/gh-action-pypi-publish release (v1.13.0) recommends it, and I'm inclined to consider it in this project.