fix code cov

Author: bckohan

.github/workflows/test.yml

@@ -267,6 +267,9 @@ jobs:
   coverage-combine:
     needs: [test-linux, test-macos, test-windows]
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
 
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd

justfile

@@ -222,7 +222,7 @@ check-all *ENV:
 # run zizmor security analysis of CI
 zizmor:
     cargo install --locked zizmor
-    zizmor --persona auditor --format sarif .github/workflows/ > zizmor.sarif
+    zizmor --format sarif .github/workflows/ > zizmor.sarif
 
 # run specific tests (project venv)
 test *TESTS: