Add zizmor checks #18

	name: py checks

	on:
	pull_request:
	push:

	permissions:
	contents: read

	jobs:
	py-checks:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout working copy
	uses: actions/checkout@v4
	with:
	persist-credentials: false
	- name: ruff check
	uses: chartboost/ruff-action@v1
	with:
	args: check
	- name: ruff format
	if: always()
	uses: chartboost/ruff-action@v1
	with:
	args: format --diff
	- name: Set up Python
	id: setup_python
	if: always()
	uses: actions/setup-python@v5
	with:
	python-version: "3.x"
	- name: Install mypy
	id: install_mypy
	if: ${{ always() && steps.setup_python.conclusion == 'success' }}
	run: \|
	python -mpip install --upgrade pip
	python -mpip install mypy pytest types-PyYaml
	- name: mypy
	if: ${{ always() && steps.install_mypy.conclusion == 'success' }}
	run: mypy --strict .

Provide feedback