diff --git a/.github/workflows/renew.yaml b/.github/workflows/renew.yaml
index 8d9ce44c..2221718f 100644
--- a/.github/workflows/renew.yaml
+++ b/.github/workflows/renew.yaml
@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2  # zizmor: ignore[artipacked]
+        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2
         with:
           token: "${{ secrets.ERGEBNIS_BOT_TOKEN }}"
 
diff --git a/.github/zizmor.yaml b/.github/zizmor.yaml
new file mode 100644
index 00000000..a08d7d9d
--- /dev/null
+++ b/.github/zizmor.yaml
@@ -0,0 +1,4 @@
+rules:
+  artipacked:
+    ignore:
+      - "renew.yaml"