ci: Fix zizmor warnings

Author: koki-develop

.github/workflows/ci.yml

@@ -10,6 +10,7 @@ on:
 
 jobs:
   test:
+    name: Test
     timeout-minutes: 10
     permissions:
       contents: read
@@ -22,6 +23,7 @@ jobs:
       - run: go test ./...
 
   build:
+    name: Build
     timeout-minutes: 10
     permissions:
       contents: read
@@ -35,6 +37,7 @@ jobs:
       - run: goreleaser release --snapshot --clean
 
   lint:
+    name: Lint
     timeout-minutes: 10
     permissions:
       contents: read

.github/workflows/claude-renovate-review.yml

@@ -14,12 +14,13 @@ concurrency:
 
 jobs:
   claude-renovate-review:
+    name: Claude Renovate Review
     if: github.event.pull_request.user.login == 'renovate[bot]'
     timeout-minutes: 30
     runs-on: ubuntu-latest
     permissions:
       contents: read
-      pull-requests: write
+      pull-requests: write # required so Claude can comment on Renovate PRs
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:

.github/workflows/github-actions-lint.yml

@@ -18,6 +18,7 @@ concurrency:
 
 jobs:
   actionlint:
+    name: actionlint
     timeout-minutes: 5
     runs-on: ubuntu-latest
     permissions:
@@ -29,6 +30,7 @@ jobs:
       - uses: koki-develop/github-actions-lint/actionlint@62dfef5c9854a07712bad7af3bee7edb0c1109b1 # v1.4.1
 
   ghalint:
+    name: ghalint
     timeout-minutes: 5
     runs-on: ubuntu-latest
     permissions:
@@ -42,6 +44,7 @@ jobs:
           action-path: ./.github/actions/**/action.yml
 
   zizmor:
+    name: zizmor
     timeout-minutes: 5
     runs-on: ubuntu-latest
     permissions:

.github/workflows/release-please.yml

@@ -13,6 +13,7 @@ concurrency:
 
 jobs:
   release-please:
+    name: Release Please
     timeout-minutes: 10
     runs-on: ubuntu-latest
     permissions:
@@ -29,6 +30,7 @@ jobs:
           token: ${{ github.token }}
 
   release:
+    name: Release
     if: ${{ needs.release-please.outputs.should-release == 'true' }}
     timeout-minutes: 10
     needs: release-please

.github/workflows/update-demo.yml

@@ -7,10 +7,11 @@ on:
 
 jobs:
   update-demo:
+    name: Update Demo
     timeout-minutes: 10
     permissions:
-      contents: write
-      pull-requests: write
+      contents: write # needed to commit regenerated demo artifacts
+      pull-requests: write # needed to open the update pull request
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

.github/workflows/update-docs.yml

@@ -13,11 +13,12 @@ concurrency:
 
 jobs:
   update-docs:
+    name: Update Docs
     timeout-minutes: 10
     runs-on: ubuntu-latest
     permissions:
-      contents: write
-      pull-requests: write
+      contents: write # needed to commit generated documentation updates
+      pull-requests: write # needed to open a PR with the doc changes
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with: