add zizmor config

Author: mschoettle

zizmor.yml

@@ -0,0 +1,11 @@
+# SPDX-FileCopyrightText: Copyright (C) 2025 Opal Health Informatics Group at the Research Institute of the McGill University Health Centre <[email protected]>
+#
+# SPDX-License-Identifier: MIT
+
+rules:
+  unpinned-uses:
+    config:
+      policies:
+        actions/*: ref-pin
+        mschoettle/pre-commit-action: ref-pin
+        astral-sh/setup-uv: ref-pin