Add zizmor static analysis gate for GitHub Actions workflows - #78

Open

michaelpeterswa wants to merge 7 commits into

mainfrom

feat/zizmor-ci-gate

Commits on Sep 1, 2026

feat: add zizmor static analysis gate for GitHub Actions workflows

michaelpeterswa
and
claude
committed
3a95af4
fix: use GitHub annotations instead of SARIF for zizmor findings

michaelpeterswa
and
claude
committed
34e9f5d
feat: post a PR summary comment with zizmor findings

michaelpeterswa
and
claude
committed
d6fc04d
chore: trigger CI to verify sticky comment update

michaelpeterswa
and
claude
committed
cfc77d9
fix: use gh api -F (not -f) to read the comment body from file

michaelpeterswa
and
claude
committed
2e7f31b
chore: trigger CI to verify sticky comment update works end to end

michaelpeterswa
and
claude
committed
6ca4dee
fix: sort PR summary comment by severity, then count

michaelpeterswa
and
claude
committed
47eb228