zizmor — a tool for finding security issues in GitHub Actions setups