Fix CI: resolve all zizmor security audit findings

Fix CI: resolve all zizmor security audit findings #399