Rust and zizmor currently trigger `on: push`, which includes tags. They should only trigger on branch pushes.
Rust and zizmor currently trigger
on: push, which includes tags. They should only trigger on branch pushes.