We hardened zizmor's GitHub Actions static analyzer | Hacker News Reader