[4.2.x] Added GitHub Actions linter (zizmor).

At the direction of the Security Team. Thanks Markus Holtermann,
Jake Howard, and Natalia Bidart for reviews.

Backport of 09d4bf5cd9c95c588d3ec22edea5db1f5f146900 from main.

1 files changed, 9 insertions, 0 deletions

diff --git a/tox.ini b/tox.ini
index b5c3fedd55..12c60921cd 100644
--- a/tox.ini
+++ b/tox.ini
@@ -13,6 +13,7 @@ envlist =
     flake8
     docs
     isort
+    zizmor
 
 # Add environment to use the default python3 installation
 [testenv:py3]
@@ -86,3 +87,11 @@ allowlist_externals =
 commands =
     npm install
     npm test
+
+[testenv:zizmor]
+basepython = python3
+usedevelop = false
+deps = zizmor >= 1.16.3
+changedir = {toxinidir}
+commands =
+    zizmor .