Zizmor – static analysis for GitHub Actions
github.com