Use docker composite action

Author: TonyCTHsu

.github/workflows/check.yml

@@ -140,12 +140,10 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
-
-      - name: Install the latest version of uv
-        uses: astral-sh/setup-uv@f94ec6bedd8674c4426838e6b50417d36b6ab231 # v5.3.1
-
       - name: Run zizmor 🌈
-        run: uvx zizmor --min-severity low .
+        uses: docker://ghcr.io/woodruffw/zizmor@sha256:dbd8fffd06c51b0ea80dff6115547a0b4fe97fc67785d82f198ecf36d8a32ebe #
+        with:
+          args: --min-severity low .
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}