static-analysis 2 We hardened zizmor's GitHub Actions static analyzer May 22, 2026 Introducing our open source AI-native SAST Apr 11, 2026