zizmor - Static analysis for GitHub Actions