fix: Disable network access for zizmor in pre-commit hooks (#144)

Author: delsner

.lefthook.yaml

@@ -49,7 +49,7 @@ pre-commit:
             run: pixi {run} typos --force-exclude {staged_files}
           - name: zizmor
             glob: "*.{yml,yaml}"
-            run: pixi {run} zizmor --no-progress --min-severity high --fix .
+            run: pixi {run} zizmor --no-progress --min-severity high --fix --offline .
           - name: conftest
             glob: "Dockerfile*"
             run: pixi {run} conftest-run {staged_files}

template/.lefthook.yaml

@@ -46,4 +46,4 @@ pre-commit:
             run: pixi {run} typos --force-exclude {staged_files}
           - name: zizmor
             glob: "*.{yml,yaml}"
-            run: pixi {run} zizmor --no-progress --min-severity high --fix .
+            run: pixi {run} zizmor --no-progress --min-severity high --fix --offline .