diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 39c687f39..73a5dc238 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -20,6 +20,11 @@ repos:
   hooks:
   - id: typos
 
+- repo: https://github.com/zizmorcore/zizmor-pre-commit
+  rev: v1.16.3
+  hooks:
+  - id: zizmor
+    args: ['--persona=auditor', '--no-progress']
 
 ci:
   autoupdate_commit_msg: "chore(pre-commit): autoupdate"