feat(ci): add Zizmor

[AlexanderBarabanov]

Description

This PR introduces Zizmor, a static code analyzer for GitHub Actions workflows, with the following changes:

Zizmor integration:

• PR Checks: Automatically analyzes workflow changes and posts inline comments on PRs for easy review
• Automated Enforcement: Fails PRs containing >=high-severity security issues
• Continuous Monitoring: Scheduled scans of all workflows with results published to the Security tab

Other:

• Fixed all high-severity issues identified by Zizmor
• Updated Dependabot configuration to check for action updates weekly

Any Newly Introduced Dependencies

Zizmor - MIT https://github.com/zizmorcore/zizmor/blob/main/LICENSE

How Has This Been Tested?

Was tested in the fork https://github.com/AlexanderBarabanov/edge-ai-libraries

• PR example with high severity issues and Zizmoir behavior: Test PR AlexanderBarabanov/edge-ai-libraries#1
• Run on push event example https://github.com/AlexanderBarabanov/edge-ai-libraries/actions/runs/20780130858

Checklist:

• I agree to use the APACHE-2.0 license for my code changes.
• I have not introduced any 3rd party components incompatible with APACHE-2.0.
• I have not included any company confidential information, trade secret, password or security token.
• I have performed a self-review of my code.

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[ucjaiswal]

Looks good .