diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 2c284eb6f..dd58cfa38 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -67,3 +67,9 @@ repos:
     - id: codespell
       additional_dependencies:
         - tomli
+
+  # Ensure github actions remain safe
+  - repo: https://github.com/woodruffw/zizmor-pre-commit
+    rev: v1.3.1
+    hooks:
+    - id: zizmor