Merge pull request #191 from maxmind/pnelson/uhu-960-zizmor-update

update zizmor to verson 1.7.0

Author: faktas2

.github/workflows/clang-analyzer.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Setup PHP
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@cf4cade2721270509d5b1c766ab3549210a39a2a # 2.33.0
         with:
           php-version: 8.4
           tools: composer, phpize

.github/workflows/lint.yml

@@ -14,7 +14,7 @@ jobs:
     name: "PHP Lints"
     steps:
       - name: Setup PHP
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@cf4cade2721270509d5b1c766ab3549210a39a2a # 2.33.0
         with:
           php-version: 8.3
 

.github/workflows/test.yml

@@ -26,7 +26,7 @@ jobs:
     name: "PHP ${{ matrix.php-version }} (with ${{ matrix.php-extension }}) test on ${{ matrix.operating-system }}/${{ matrix.arch }}"
     steps:
       - name: Install PHP
-        uses: shivammathur/setup-php@v2
+        uses: shivammathur/setup-php@cf4cade2721270509d5b1c766ab3549210a39a2a # 2.33.0
         with:
           php-version: ${{ matrix.php-version }}
           extensions: "mbstring, intl, ${{ matrix.php-extension }}"

.github/workflows/zizmor.yml

@@ -22,11 +22,11 @@ jobs:
           persist-credentials: false
 
       - name: Install the latest version of uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@6b9c6063abd6010835644d4c2e1bef4cf5cd0fca # 6.0.1
         with:
           enable-cache: false
 
       - name: Run zizmor
-        run: uvx zizmor@1.5.2 --format plain .
+        run: uvx zizmor@1.7.0 --format plain .
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}