Merge pull request #606 from storopoli/feat/zizmor

feat: add zizmor

Author: domenkozar

README.md

@@ -450,6 +450,7 @@ use nix
 - [topiary](https://github.com/tweag/topiary)
 - [treefmt](https://github.com/numtide/treefmt)
 - [trim-trailing-whitespace](https://github.com/pre-commit/pre-commit-hooks/blob/main/pre_commit_hooks/trailing_whitespace_fixer.py)
+- [zizmor](https://github.com/zizmorcore/zizmor)
 
 ### Custom hooks
 

modules/hooks.nix

@@ -4152,6 +4152,14 @@ lib.escapeShellArgs (lib.concatMap (ext: [ "--ghc-opt" "-X${ext}" ]) hooks.fourm
             in
             "${hooks.yamllint.package}/bin/yamllint ${cmdArgs}";
         };
+      zizmor = {
+        name = "zizmor";
+        description = "Static analysis for GitHub Actions";
+        files = "^.github/workflows/";
+        types = [ "yaml" ];
+        package = tools.zizmor;
+        entry = "${hooks.zizmor.package}/bin/zizmor";
+      };
       zprint =
         {
           name = "zprint";

nix/tools.nix

@@ -95,6 +95,7 @@
 , revive ? null
 , uv
 , vale
+, zizmor
 }:
 
 
@@ -178,6 +179,7 @@ in
     vale
     yamlfmt
     yamllint
+    zizmor
     zprint
     ;
   inherit (elmPackages) elm-format elm-review elm-test;