fix job

Author: Eclips4

.github/setup-rust-windows/action.yml

@@ -18,7 +18,7 @@ runs:
     # install here rather than the VS-bundled LLVM whose clang headers have
     # AVX intrinsic bugs.  The values are hardcoded literals (no attacker-
     # controlled input), so the GITHUB_ENV writes are safe.
-    - name: Install LLVM for bindgen
+    - name: Install LLVM for bindgen  # zizmor: ignore[github-env]
       if: inputs.arch != 'arm64'
       shell: cmd
       run: |
@@ -27,12 +27,12 @@ runs:
         echo LIBCLANG_PATH=C:\Program Files\LLVM\bin>> "%GITHUB_ENV%"
     # Chocolatey's LLVM package only ships x64 binaries, which an ARM64-native
     # cargo process cannot load.  Install the official ARM64 build directly.
-    - name: Install LLVM for bindgen (ARM64)
+    - name: Install LLVM for bindgen (ARM64)  # zizmor: ignore[github-env]
       if: inputs.arch == 'arm64'
       shell: pwsh
       run: |
         $installer = Join-Path $env:RUNNER_TEMP 'LLVM-21.1.0-woa64.exe'
         Invoke-WebRequest 'https://github.com/llvm/llvm-project/releases/download/llvmorg-21.1.0/LLVM-21.1.0-woa64.exe' -OutFile $installer
         Start-Process -Wait -FilePath $installer -ArgumentList '/S','/D=C:\Program Files\LLVM'
         if (!(Test-Path 'C:\Program Files\LLVM\bin\libclang.dll')) { exit 1 }
-        echo "LIBCLANG_PATH=C:\Program Files\LLVM\bin" >> $env:GITHUB_ENV  # zizmor: ignore[environment-file]
+        echo "LIBCLANG_PATH=C:\Program Files\LLVM\bin" >> $env:GITHUB_ENV