diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index da1c0459d..f468d6b83 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -10,7 +10,7 @@ permissions:
 
 jobs:
   zizmor:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     permissions:
       contents: read
       security-events: write
@@ -19,14 +19,6 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - name: Update pip
-        run: scripts/update-pip.sh
-      - name: Install zizmor
-        run: pip install zizmor==1.30.1  # also update pyproject.toml
+
       - name: Run zizmor
-        run: zizmor --format sarif .github/workflows/ > zizmor-results.sarif
-      - name: Upload SARIF file
-        # https://github.com/github/codeql-action/releases
-        uses: github/codeql-action/upload-sarif@33d7b85da1a04171e211befe2c739303b9a4c066  # v4.39.3
-        with:
-          sarif_file: zizmor-results.sarif
+        uses: zizmorcore/zizmor-action@53290badfa369cb0bf7ad16342cb62c2fa47ac7b # v0.8.0  Sync with pyproject.toml
diff --git a/news/+zizmor-github-action.internal b/news/+zizmor-github-action.internal
new file mode 100644
index 000000000..cf642a8cf
--- /dev/null
+++ b/news/+zizmor-github-action.internal
@@ -0,0 +1 @@
+Switched to use the recommended GitHub Action :program:`zizmorcore/zizmor-action` from installing :program:`zizmor` via pip. @stevepiercy
diff --git a/pyproject.toml b/pyproject.toml
index 6f4a21a5d..a7763bb91 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -103,7 +103,7 @@ dev = [
   "towncrier>=25.8.0",
   "tox",
   "tox-uv",
-  "zizmor==1.30.1", # also update .github/workflows/zizmor.yml
+  "zizmor==1.30.1",  # Sync with .github/workflows/zizmor.yml
 ]
 
 test = [