Move zizmor ignores to .github/linters/zizmor.yml

Author: MariusStorhaug

.github/linters/zizmor.yml

@@ -0,0 +1,10 @@
+rules:
+  dangerous-triggers:
+    ignore:
+      # Auto-Release needs write access to create releases on PR merge
+      - Auto-Release.yml
+  unpinned-uses:
+    ignore:
+      # External actions - not pinned by design
+      - Auto-Release.yml
+      - Linter.yml

.github/workflows/Auto-Release.yml

@@ -2,7 +2,6 @@ name: Auto-Release
 
 run-name: "Auto-Release - [${{ github.event.pull_request.title }} #${{ github.event.pull_request.number }}] by @${{ github.actor }}"
 
-# zizmor: ignore[dangerous-triggers] intentional - Auto-Release needs write access to create releases on PR merge
 on:
   pull_request_target:
     branches:
@@ -32,7 +31,6 @@ jobs:
           persist-credentials: false
 
       - name: Auto-Release
-        # zizmor: ignore[unpinned-uses] not our action
         uses: PSModule/Auto-Release@v1
         with:
           IncrementalPrerelease: false

.github/workflows/Linter.yml

@@ -25,7 +25,6 @@ jobs:
           persist-credentials: false
 
       - name: Lint code base
-        # zizmor: ignore[unpinned-uses] not our action
         uses: super-linter/super-linter@latest
         env:
           GITHUB_TOKEN: ${{ github.token }}