Post #1590320

@westonsteimel hmm, like something where zizmor warns you to always explicitly put `permissions: {}`, even if all jobs are already down-scoped? That’s something I’d consider adding as a pedantic or auditor finding to zizmor, but I’m not aware of anything else that does that