zizmorcore/zizmor

Rustdocs.zizmor.sh

Général #9,352 Rust #386 CI/CD #60

macOSWindowsLinux

Static analysis for GitHub Actions

github-actionssecuritysecurity-toolsstatic-analysis

Indicateurs clés

Croissance des étoiles

Étoiles

6.5k

Forks

247

Croissance hebdomadaire

+35

Issues

139

2k4k6k

oct. 2024janv. 2025mai 2025sept. 2025janv. 2026mai 2026sept. 2026

↓ Télécharger

Toutes les versions →

macOS

Windows

zizmor-x86_64-pc-windows-msvc.zip8 MB

Linux

Artefactscrates.io

README

🌈 zizmor

zizmor is a static analysis tool for CI/CD systems.

It can find and fix security issues in common CI/CD setups, including GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor finds:

Template injection vulnerabilities, leading to attacker-controlled code execution
Accidental credential persistence and leakage
Excessive permission scopes and credential grants to runners
Impostor commits and confusable git references
...and much more!

zizmor demo

See zizmor's documentation for installation steps, as well as a quickstart and detailed usage recipes.

License

zizmor is licensed under the MIT License.

Contributing

See our contributing guide!

The name?

Now you can have beautiful clean workflows!

Logo-level sponsors
Grafana Labs	Trail of Bits	Kusari	Tracebit

Name-level sponsors
Alexander Riccio	Carol Willing

Star History

Dépôts similaires

nektos/act

Run your GitHub Actions locally 🚀

GoGo ModulesMIT Licensegithub-actionsgolang

nektosact.com

71.8k2k

go-gitea/gitea

Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD

GoGo ModulesMIT Licensegiteagolang

gitea.com

57.9k7.1k

fastapi/full-stack-fastapi-template

Full-stack web application template with FastAPI, React, SQLModel, PostgreSQL, Vite, Tailwind CSS, shadcn/ui, FastAPI Cloud, and Docker Compose.

TypeScriptnpmMIT Licensepythondocker

45.4k9k

sdras/awesome-actions

A curated list of awesome actions to use on GitHub

awesomeCreative Commons Zero v1.0 Universalawesomegithub

28.2k1.8k

goreleaser/goreleaser

Release engineering, simplified

GoGo ModuleslibraryMIT Licenserelease-automationpackage

goreleaser.com

16k1.1k

ubicloud/ubicloud

Open source alternative to AWS. Elastic compute, block storage (non replicated), firewall and load balancer, managed Postgres, K8s, AI inference, and IAM services.

RubyRubyGemsGNU Affero General Public License v3.0cloudportable

ubicloud.com

12.3k587

cobusgreyling/loop-engineering

Practical patterns, starters & CLI tools for loop engineering with AI coding agents. Design systems that prompt and orchestrate agents (inspired by Addy Osmani and Boris Cherny). Includes loop-audit, loop-init, loop-cost.

TypeScriptnpmMIT Licenseagentic-aiai-agents

cobusgreyling.github.io/loop-engineering/

11.1k1.5k

Agents365-ai/drawio-skill

From text & real sources to maintainable .drawio architecture models: Diagram IR with source-kind profiles, incremental sync preserving manual layout, multi-view projection, architecture-as-test with a CI action, query/review, what-if, accessible Story Mode, and a built-in MCP server

PythonPyPIskillMIT Licensedrawiodiagram

agents365-ai.github.io/drawio-skill/

9.1k643

community/community

Public feedback discussions for: GitHub Mobile, GitHub Discussions, GitHub Codespaces, GitHub Sponsors, GitHub Issues and more!

RubyRubyGemsCreative Commons Attribution 4.0 Internationalgithubgithub-enterprise

8.7k4.4k

P3TERX/Actions-OpenWrt

A template for building OpenWrt with GitHub Actions | 使用 GitHub Actions 在线云编译 OpenWrt 固件

ShellMIT Licenseopenwrtactions-openwrt

p3terx.com/archives/build-openwrt-with-github-actions.html

7.6k6.9k