style: add zizmor config (#181)

2bndy5 · web-flow · commit f9b56dc80087 · 2026-01-22T13:46:55.000-08:00
This should allow pinning cpp-linter reusable workflows to a branch. See [zizmor v1.20 release notes](https://docs.zizmor.sh/release-notes/#1200).
diff --git a/.github/zizmor.yml b/.github/zizmor.yml
@@ -0,0 +1,8 @@
+rules:
+  unpinned-uses:
+    config:
+      policies:
+        actions/*: ref-pin
+        github/*: ref-pin
+        dependabot/*: ref-pin
+        cpp-linter/*: any
diff --git a/cspell.config.yml b/cspell.config.yml
@@ -53,6 +53,7 @@ words:
   - vararg
   - venv
   - viewcode
+  - zizmor
 ignorePaths:
   - .env/**
   - .venv/**
