i should've checked the doc

Author: Eclips4

.github/setup-rust-windows/action.yml

@@ -18,19 +18,19 @@ runs:
     # install here rather than the VS-bundled LLVM whose clang headers have
     # AVX intrinsic bugs.  The values are hardcoded literals (no attacker-
     # controlled input), so the GITHUB_ENV writes are safe.
-    - name: Install LLVM for bindgen  # zizmor: ignore[github-env]
+    - name: Install LLVM for bindgen
       if: inputs.arch != 'arm64'
       shell: cmd
-      run: |
+      run: | # zizmor: ignore[github-env]
         choco install llvm --allow-downgrade --no-progress --version 21.1.0
         if not exist "C:\Program Files\LLVM\bin\libclang.dll" exit /b 1
         echo LIBCLANG_PATH=C:\Program Files\LLVM\bin>> "%GITHUB_ENV%"
     # Chocolatey's LLVM package only ships x64 binaries, which an ARM64-native
     # cargo process cannot load.  Install the official ARM64 build directly.
-    - name: Install LLVM for bindgen (ARM64)  # zizmor: ignore[github-env]
+    - name: Install LLVM for bindgen (ARM64)
       if: inputs.arch == 'arm64'
       shell: pwsh
-      run: |
+      run: | # zizmor: ignore[github-env]
         $installer = Join-Path $env:RUNNER_TEMP 'LLVM-21.1.0-woa64.exe'
         Invoke-WebRequest 'https://github.com/llvm/llvm-project/releases/download/llvmorg-21.1.0/LLVM-21.1.0-woa64.exe' -OutFile $installer
         Start-Process -Wait -FilePath $installer -ArgumentList '/S','/D=C:\Program Files\LLVM'