Add shell to each step of the composite action

Author: mhsmith

.github/actions/build-android/action.yml

@@ -16,8 +16,10 @@ runs:
 
   steps:
     # Build Python, and package it into a release artifact.
-    - run: ./Android/android.py build ${{ inputs.triplet }}
-    - run: ./Android/android.py package ${{ inputs.triplet }}
+    - shell: bash
+      run: ./Android/android.py build ${{ inputs.triplet }}
+    - shell: bash
+      run: ./Android/android.py package ${{ inputs.triplet }}
     - uses: actions/upload-artifact@v4
       with:
         name: android
@@ -30,6 +32,7 @@ runs:
     # (https://github.blog/changelog/2024-04-02-github-actions-hardware-accelerated-android-virtualization-now-available/).
     - name: Enable KVM for Android emulator
       if: runner.os == "Linux"
+      shell: bash
       run: |
         echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' \
           | sudo tee /etc/udev/rules.d/99-kvm4all.rules
@@ -38,12 +41,14 @@ runs:
 
     - name: Unpack release artifact
       if: runner.os == "Linux"
+      shell: bash
       run: |
         mkdir $RUNNER_TEMP/android
         tar -C $RUNNER_TEMP/android -xf cross-build/${{ inputs.triplet }}/dist/*
 
     - name: Tests
       if: runner.os == "Linux"
+      shell: bash
       run: |
         $RUNNER_TEMP/android/android.py test --managed maxVersion -v -- \
           -uall --single-process --rerun -W

.github/zizmor.yml

@@ -8,6 +8,3 @@ rules:
     config:
       policies:
         "*": ref-pin
-  obfuscation:
-    ignore:
-      - build.yml

.pre-commit-config.yaml

@@ -72,9 +72,10 @@ repos:
       - id: actionlint
 
   - repo: https://github.com/woodruffw/zizmor-pre-commit
-    rev: v1.11.0
+    rev: v1.6.0
     hooks:
       - id: zizmor
+        exclude: ^.github/actions/
 
   - repo: https://github.com/sphinx-contrib/sphinx-lint
     rev: v1.0.0