ci: add zizmor GitHub Actions security analysis#5469

Open

broady wants to merge 5 commits into

mainfrom

devin/1778597713-add-zizmor

Commits on May 12, 2026

ci: add zizmor GitHub Actions security analysis

devin-ai-integration[bot]
and
broady
committed
ci: apply zizmor auto-fixes (SHA pin actions, persist-credentials false, env-var indirection)

devin-ai-integration[bot]
and
broady
committed
ci(dependabot): keep GitHub Actions pinned SHAs up to date (7d cooldown)

devin-ai-integration[bot]
and
broady
committed
ci(vale): pin errata-ai/vale-action to v2.1.1 SHA (was @reviewdog branch)

devin-ai-integration[bot]
and
broady
committed
ci: swap preview-docs trigger from pull_request_target to pull_request

devin-ai-integration[bot]
and
broady
committed