Run Zizmor with GH token (#612)

Author: Tinche

.github/workflows/zizmor.yml

@@ -25,13 +25,15 @@ jobs:
         uses: astral-sh/setup-uv@v4
         with:
           version: "latest"
-      - name: Run zizmor
+      - name: Run zizmor 🌈
         run: uvx zizmor --format sarif . > results.sarif
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: Upload SARIF file
         uses: github/codeql-action/upload-sarif@v3
         with:
           # Path to SARIF file relative to the root of the repository
           sarif_file: results.sarif
           # Optional category for the results
           # Used to differentiate multiple results for one commit
-          category: zizmor
+          category: zizmor