Pre-submission checks

• I am not filing a feature request. These should be filed via the feature request form instead.
• I have looked through the open issues for a duplicate report.

Expected behavior

It should tell you that you need

        uses: actions/checkout@v4
        with:
          persist-credentials: false

Actual behavior

Instead of

   |
15 |         - name: "Checkout repo"
   |  _________-
16 | |         uses: actions/checkout@v4
   | |_________________________________- does not set persist-credentials: false
   |

Reproduction steps

1. Missing persist-credentials: false
2. Run zizmor

Logs

No response

Additional context

No response