From d6a1b7b4a2f08c1c6c6dcf4ac71eb539b9c015b2 Mon Sep 17 00:00:00 2001
From: mpgn <5891788+mpgn@users.noreply.github.com>
Date: Mon, 13 Apr 2026 10:05:47 +0200
Subject: [PATCH 1/2] Create CODEOWNERS

---
 CODEOWNERS | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 CODEOWNERS

diff --git a/CODEOWNERS b/CODEOWNERS
new file mode 100644
index 0000000..fa4ef9b
--- /dev/null
+++ b/CODEOWNERS
@@ -0,0 +1 @@
+* @LuccaSA/security

From dc2944feb6723ad4b1ef9a1931dcf806ebca8633 Mon Sep 17 00:00:00 2001
From: mpgn <5891788+mpgn@users.noreply.github.com>
Date: Mon, 13 Apr 2026 10:09:46 +0200
Subject: [PATCH 2/2] Update zizmor-audit-public.yaml

---
 .github/workflows/zizmor-audit-public.yaml | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/.github/workflows/zizmor-audit-public.yaml b/.github/workflows/zizmor-audit-public.yaml
index dcb37bc..ac1f715 100644
--- a/.github/workflows/zizmor-audit-public.yaml
+++ b/.github/workflows/zizmor-audit-public.yaml
@@ -7,13 +7,8 @@ jobs:
   zizmor-scan:
     name: Zizmor Scan
     if: github.base_ref == github.event.repository.default_branch
-    runs-on: lucca-ci
+    runs-on: ubuntu-latest
     timeout-minutes: 60
-    container:
-      image: "ghcr.io/luccasa/lucca-ci:v3@sha256:97fb9cb789492af5d8ffa7e03ed27a63e7f3146e7aea0c5be076423188cba9f5"
-      credentials:
-        username: ${{ github.actor }}
-        password: ${{ secrets.github_token }}
     permissions:
       contents: read
     steps: