Implement zizmor checks

[ejfine]

Code improvement description

for github action security
https://github.com/astral-sh/ty/blob/240120a72bb74a9eb1b29010a49ced217fe56e20/.pre-commit-config.yaml#L61