added zizmor security to workflow

[saicheranb]

No description provided.

[Copilot]

Pull Request Overview

This PR integrates a Zizmor security scan into the CI pipeline and tightens permissions on several workflows.

• Add a Zizmor security scan job to static-analysis.yml
• Specify granular permissions in pytest-unix-os.yml, pr_add_jira_summary.yml, and issue_to_jira.yml

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File	Description
.github/workflows/static-analysis.yml	Add new zizmor-security-scan job for security analysis
.github/workflows/pytest-unix-os.yml	Declare permissions for contents and pull requests
.github/workflows/pr_add_jira_summary.yml	Declare permissions for contents and pull requests
.github/workflows/issue_to_jira.yml	Declare permissions for contents and issues

Comments suppressed due to low confidence (3)

.github/workflows/static-analysis.yml:90

• This new job is missing a required runner definition. Please add a runs-on field (e.g., runs-on: ubuntu-latest) under this job to ensure it executes.

  zizmor-security-scan:

.github/workflows/pytest-unix-os.yml:4

• The permission key pull-requests is invalid; use pull_requests: write to match GitHub Actions permission syntax.

  pull-requests: write

.github/workflows/pr_add_jira_summary.yml:7

• The permission key pull-requests is invalid; use pull_requests: write for correct GitHub Actions syntax.

  pull-requests: write

[sebhmg]

this went to the wrong branch (to main instead of develop).
I have reset main onto develop (since main was still pointing to the orignal commit).
There will be not trace of the revisions of this PR in the git history.

See Zizmor applied in #27