ci: deploy zizmor

Author: foosel

.github/dependabot.yml

@@ -7,3 +7,5 @@ updates:
     schedule:
       # Check for updates to GitHub Actions every week
       interval: "weekly"
+    cooldown:
+      default-days: 7

.github/workflows/add_to_backlog.yml

@@ -9,12 +9,14 @@ on:
     types:
       - opened
 
+permissions: {}
+
 jobs:
   add-to-project:
     name: Add issue or PR to OctoPrint Backlog project
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/add-to-project@main
+      - uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2
         with:
           project-url: https://github.com/orgs/OctoPrint/projects/6
           github-token: ${{ secrets.BACKLOG_PROJECT_ACCESS }}