diff --git a/.gitignore b/.gitignore
index a2a3c20..1ca2998 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,3 +8,7 @@ build
 gradle/wrapper
 gradlew
 gradlew.bat
+
+# IDEA
+.idea
+out/
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 640448e..6a1cde7 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -14,8 +14,8 @@ repos:
       - id: mixed-line-ending
         args: [--fix, lf]
       - id: trailing-whitespace
-  - repo: https://github.com/woodruffw/zizmor-pre-commit
-    rev: v1.5.2
+  - repo: https://github.com/zizmorcore/zizmor-pre-commit
+    rev: v1.7.0
     hooks:
     - id: zizmor
 
diff --git a/zizmor.yml b/zizmor.yml
new file mode 100644
index 0000000..efced06
--- /dev/null
+++ b/zizmor.yml
@@ -0,0 +1,6 @@
+rules:
+  unpinned-uses:
+    config:
+      policies:
+        actions/*: ref-pin
+        "*": ref-pin