Scan with zizmor

[TonyCTHsu]

What does this PR do?

Use zizmor to lint our Github Actions.

• Add a job for zizmor
• Set zizmor with minimum severity with low
• Fix most issues.

Change log entry
None.

[datadog-datadog-prod-us1]

Datadog Report

Branch report: tonycthsu/zizmore
Commit report: ca054d3
Test service: dd-trace-rb

✅ 0 Failed, 20623 Passed, 1370 Skipped, 3m 18.19s Total Time

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 97.69%. Comparing base (34bf118) to head (ca054d3).

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #4456      +/-   ##
==========================================
- Coverage   97.69%   97.69%   -0.01%     
==========================================
  Files        1375     1375              
  Lines       83813    83812       -1     
  Branches     4251     4251              
==========================================
- Hits        81884    81880       -4     
- Misses       1929     1932       +3     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[pr-commenter]

Benchmarks

Benchmark execution time: 2025-03-05 11:51:13

Comparing candidate commit ca054d3 in PR branch tonycthsu/zizmore with baseline commit 34bf118 in branch master.

Found 1 performance improvements and 0 performance regressions! Performance is the same for 30 metrics, 2 unstable metrics.

scenario:profiler - gvl benchmark samples

• 🟩 throughput [+884.658op/s; +892.463op/s] or [+8.307%; +8.380%]