Bump zizmore to v0.5.2

Signed-off-by: smoshiur1237 <moshiur.rahman@est.tech>

Author: smoshiur1237

.github/workflows/release.yaml

@@ -114,9 +114,11 @@ jobs:
         curl -fsSL "https://raw.githubusercontent.com/${{ github.repository }}/main/releasenotes/${RELEASE_TAG}.md" \
         -o "${RELEASE_TAG}.md"
     - name: Release
-      uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # tag=v2.5.0
-      with:
-        draft: true
-        files: out/*
-        body_path: ${{ env.RELEASE_TAG }}.md
-        tag_name: ${{ env.RELEASE_TAG }}
+      run: |
+        gh release create "${RELEASE_TAG}" \
+          --draft \
+          --notes-file "${RELEASE_TAG}.md" \
+          out/*
+      env:
+        RELEASE_TAG: ${{ env.RELEASE_TAG }}
+        GH_TOKEN: ${{ github.token }}

.github/workflows/zizmor.yml

@@ -27,10 +27,10 @@ jobs:
     # Upload SARIF to Security tab on push to main
     - name: Run zizmor (SARIF)
       if: github.event_name == 'push'
-      uses: zizmorcore/zizmor-action@0dce2577a4760a2749d8cfb7a84b7d5585ebcb7d # v0.5.0
+      uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
     # Block PRs with findings
     - name: Run zizmor (PR check)
       if: github.event_name == 'pull_request'
-      uses: zizmorcore/zizmor-action@0dce2577a4760a2749d8cfb7a84b7d5585ebcb7d # v0.5.0
+      uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
       with:
         advanced-security: false