Fix zizmor lint (#3045)

* Fix zizmor lint: upgrade to 1.23.1, disable superfluous-actions and secrets-outside-env

Made-with: Cursor

* Remove secrets-outside-env disable, add environment to jobs that use secrets

Made-with: Cursor

Author: adamtheturtle

.github/workflows/release.yml

@@ -7,6 +7,7 @@ jobs:
   release:
     name: Create release
     runs-on: ubuntu-latest
+    environment: release
 
     permissions:
       # This is needed for https://github.com/stefanzweifel/git-auto-commit-action.
@@ -138,6 +139,7 @@ jobs:
     name: Publish Docker images
     needs: release
     runs-on: ubuntu-latest
+    environment: dockerhub
 
     permissions:
       packages: write

.github/workflows/test.yml

@@ -22,6 +22,7 @@ jobs:
   # CI tests with matrix
   ci-tests:
     runs-on: ubuntu-latest
+    environment: vuforia
     strategy:
       fail-fast: false
       matrix:

pyproject.toml

@@ -108,7 +108,7 @@ optional-dependencies.dev = [
     "vws-test-fixtures==2023.3.5",
     "vws-web-tools==2026.2.22.1",
     "yamlfix==1.19.1",
-    "zizmor==1.22.0",
+    "zizmor==1.23.1",
 ]
 optional-dependencies.release = [ "check-wheel-contents==0.6.3" ]
 urls.Documentation = "https://vws-python.github.io/vws-python-mock/"

zizmor.yml

@@ -8,5 +8,7 @@ rules:
     disable: true
   dependabot-cooldown:
     disable: true
+  superfluous-actions:
+    disable: true
   template-injection:
     disable: true