🤖 fix: run zizmor fallback without Docker

Change-Id: I531c03f5df9dfb5f30561c8ce936de59dff8bac3
Signed-off-by: Thomas Kosiewski <tk@coder.com>

Author: ThomasK33

scripts/zizmor.sh

@@ -8,16 +8,6 @@
 # Fallback: if Docker isn't available/running (common on dev machines), download a
 # prebuilt zizmor binary from GitHub Releases and run it directly.
 
-if ! command -v docker >/dev/null 2>&1; then
-  echo "⚠️  docker not found; skipping zizmor" >&2
-  exit 0
-fi
-
-if ! docker info >/dev/null 2>&1; then
-  echo "⚠️  docker daemon not running; skipping zizmor" >&2
-  exit 0
-fi
-
 set -euo pipefail
 
 cd "$(dirname "${BASH_SOURCE[0]}")/.."
@@ -49,12 +39,17 @@ if [[ "${GH_TOKEN:-}" != "" ]]; then
   docker_args+=("--env" "GH_TOKEN")
 fi
 
-# Prefer Docker when available (faster + consistent in CI).
-if command -v docker &>/dev/null && docker info &>/dev/null; then
+docker_unavailable_reason=""
+if ! command -v docker &>/dev/null; then
+  docker_unavailable_reason="docker not found"
+elif ! docker info &>/dev/null; then
+  docker_unavailable_reason="docker daemon not running"
+else
+  # Prefer Docker when available (faster + consistent in CI).
   exec docker run "${docker_args[@]}" "$image_tag" "$@"
 fi
 
-echo "⚠️  Docker unavailable; running zizmor via prebuilt binary..."
+echo "⚠️  ${docker_unavailable_reason}; running zizmor via prebuilt binary..." >&2
 
 os="$(uname -s)"
 arch="$(uname -m)"