fix zizmor findings