Pin zizmor version

now that it will be updated with dependabot.

This way we can fix the new warnings or error in the PR, and won't
get failed PR without related changes.

Signed-off-by: Gaëtan Lehmann <gaetan.lehmann@vates.tech>

Author: glehmann

.github/workflows/zizmor.yml

@@ -15,9 +15,7 @@ jobs:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # 6.0.1
         with:
           persist-credentials: false
-      - uses: ./.github/actions/uv-setup/
-        with:
-          sync: false
-      - run: uvx zizmor --color=always .
+      - uses: ./.github/actions/uv-setup
+      - run: zizmor --color=always .
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} 

pyproject.toml

@@ -29,6 +29,7 @@ dev = [
     "types-requests",
     "typing-extensions",
     "libarchive-c==5.3",
+    "zizmor",
 ]
 
 [tool.pyright]
@@ -37,7 +38,7 @@ typeCheckingMode = "standard"
 [tool.ruff]
 preview = true
 line-length = 120
-exclude = ["data.py", "vm_data.py", ".git"]
+sexclude = ["data.py", "vm_data.py", ".git"]
 
 [tool.ruff.format]
 quote-style = "preserve"