ci: add zizmor workflow #1146

	name: autofix.ci # needed to securely identify the workflow

	on:
	pull_request:
	push:
	branches: [main]

	concurrency:
	group: ${{ github.workflow }}-${{ github.event.number \|\| github.ref }}
	cancel-in-progress: true

	permissions:
	contents: write

	jobs:
	autofix:
	name: autofix
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
	with:
	fetch-depth: 0
	# autofix-ci commits formatting fixes back to this branch.
	persist-credentials: true
	- name: Setup Tools
	uses: tanstack/config/.github/setup@8f433551298bae362c0e7a356f38c7d240c05d47 # main
	- name: Fix formatting
	run: pnpm format
	- name: Apply fixes
	uses: autofix-ci/action@635ffb0c9798bd160680f18fd73371e355b85f27
	with:
	commit-message: 'ci: apply automated fixes'

Provide feedback