From 1cf2eb6aaffee13a5aab4354ce093143b6c8c814 Mon Sep 17 00:00:00 2001
From: monosans <hsyqixco@protonmail.com>
Date: Thu, 11 Jun 2026 17:44:06 +0300
Subject: [PATCH] ci: add zizmor

---
 .github/workflows/ci.yml | 2 +-
 .pre-commit-config.yaml  | 4 ++++
 zizmor.yaml              | 7 +++++++
 3 files changed, 12 insertions(+), 1 deletion(-)
 create mode 100644 zizmor.yaml

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8cfdd5c..5a7be44 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -471,7 +471,7 @@ jobs:
         with:
           python-version: "3.14"
           enable-cache: false
-      - run: uv tool run --exclude-newer '3 days' --no-cache prek run --all-files --show-diff-on-failure
+      - run: uvx --no-cache prek run --all-files --show-diff-on-failure
   rustfmt:
     runs-on: ubuntu-24.04
     steps:
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 719dc07..a786ba5 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -27,3 +27,7 @@ repos:
     rev: v3.8.3
     hooks:
       - id: prettier
+  - repo: https://github.com/zizmorcore/zizmor-pre-commit
+    rev: v1.25.2
+    hooks:
+      - id: zizmor
diff --git a/zizmor.yaml b/zizmor.yaml
new file mode 100644
index 0000000..61e63e9
--- /dev/null
+++ b/zizmor.yaml
@@ -0,0 +1,7 @@
+rules:
+  anonymous-definition:
+    disable: true
+  template-injection:
+    disable: true
+  undocumented-permissions:
+    disable: true