Securing our GitHub Actions workflows with zizmor

This is the next post in our supply chain security series, following the supply chain security update , the Composer 2.10 release and immutable version metadata on Packagist.org . The earlier posts covered Composer behavior, changes to Packagist.org, and Private Packagist features. Today we’ll cover how we