[robbiet480]

Thanks for making me aware of zizmor, just ran and fixed all issues on our core repos.

[vldszn]

You are welcome! Recently discovered it and found it genuinely useful. Fixed a bunch of issues in my workflows too :)

[bodash]

few more tips here: https://github.com/bodadotsh/npm-security-best-practices