build(deps): bump zizmorcore/zizmor-action from 0.3.0 to 0.4.1 #32

	name: GitHub Actions Security Analysis with zizmor

	# Note: on key treated as boolean key by YAML
	# https://github.com/adrienverge/yamllint/issues/158#issuecomment-454313233
	# However, GitHub Actions documentation is consistent in using it unquoted.
	on: # yamllint disable-line rule:truthy
	push:
	branches: ['main']
	pull_request:
	branches: ['**']
	schedule:
	# Run once a month (at 8:40 AM UTC) to check for exogenous breakage.
	- cron: '40 8 2 * *'
	workflow_dispatch: {}

	permissions: {}

	jobs:
	zizmor:
	runs-on: ubuntu-latest
	permissions:
	security-events: write
	steps:
	- name: Checkout repository
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	persist-credentials: false

	- name: Run zizmor
	uses: zizmorcore/zizmor-action@135698455da5c3b3e55f73f4419e481ab68cdd95 # v0.4.1

Provide feedback