chore: Harden workflows: least-privilege permissions + zizmor integration#1039

gdams merged 5 commits into

actions:mainactions/setup-java:mainfrom

brunoborges:harden-workflows-zizmorbrunoborges/setup-java:harden-workflows-zizmorCopy head branch name to clipboard