Assisted-by: Claude Opus 4.6 via pi

diff --git a/Rakefile b/Rakefile
index a1515da8..6c9a92a5 100644
--- a/Rakefile
+++ b/Rakefile
@@ -97,8 +97,13 @@ namespace :dotslash do
     update_dotslash_release(name: "fzf", repo: "junegunn/fzf") { |tag| "fzf-#{tag.delete_prefix("v")}-darwin_arm64.tar.gz" }
   end
 
+  desc "Update zizmor"
+  task(:zizmor) do
+    update_dotslash_release(name: "zizmor", repo: "zizmorcore/zizmor") { |tag| "zizmor-aarch64-apple-darwin.tar.gz" }
+  end
+
   desc "Update all dotslash files"
-  task all: [:pinch, :jq, :jj, :just, :fzf]
+  task all: [:pinch, :jq, :jj, :just, :fzf, :zizmor]
 end
 
 desc "Upgrade neovim"
diff --git a/bin/zizmor b/bin/zizmor
new file mode 100755
index 00000000..d8513fc7
--- /dev/null
+++ b/bin/zizmor
@@ -0,0 +1,25 @@
+#!/usr/bin/env dotslash
+
+{
+  "name": "zizmor",
+  "platforms": {
+    "macos-aarch64": {
+      "size": 8285345,
+      "hash": "blake3",
+      "digest": "d16ce48a84f1ac532de458a13c779be4ecf0e6ca023b566a83f05c632008b4f2",
+      "format": "tar.gz",
+      "path": "zizmor",
+      "providers": [
+        {
+          "url": "https://github.com/zizmorcore/zizmor/releases/download/v1.23.1/zizmor-aarch64-apple-darwin.tar.gz"
+        },
+        {
+          "type": "github-release",
+          "repo": "https://github.com/zizmorcore/zizmor",
+          "tag": "v1.23.1",
+          "name": "zizmor-aarch64-apple-darwin.tar.gz"
+        }
+      ]
+    }
+  }
+}