diff --git a/.github/zizmor.yml b/.github/zizmor.yml
deleted file mode 100644
index 5ba7884..0000000
--- a/.github/zizmor.yml
+++ /dev/null
@@ -1,14 +0,0 @@
-# zizmor (https://zizmor.sh) configuration
-#
-# Tunes zizmor to Netresearch conventions so the audit reports only
-# actionable findings. Third-party actions remain hash-pin enforced.
-rules:
-  unpinned-uses:
-    config:
-      policies:
-        # First-party `uses:` — reusable workflows AND composite actions —
-        # track @main by policy and are never SHA-pinned, so a fix propagates
-        # to every consumer without a bump in dozens of repos.
-        "netresearch/*": ref-pin
-        # Everything else must be pinned to a full commit SHA.
-        "*": hash-pin