ruff
Run zizmor in CI, and fix most warnings
#14844
Merged

Loading