zizmorcore/zizmor

Rustdocs.zizmor.sh

전체 #9,353 Rust #386 CI/CD #60

macOSWindowsLinux

Static analysis for GitHub Actions

github-actionssecuritysecurity-toolsstatic-analysis

주요 지표

스타 성장

스타

6.5k

포크

247

주간 성장

+36

이슈

141

2k4k6k

2024년 10월2025년 1월2025년 5월2025년 9월2026년 1월2026년 5월2026년 9월

↓ 다운로드

모든 릴리스 →

macOS

Windows

zizmor-x86_64-pc-windows-msvc.zip8 MB

Linux

아티팩트crates.io

README

🌈 zizmor

zizmor is a static analysis tool for CI/CD systems.

It can find and fix security issues in common CI/CD setups, including GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor finds:

Template injection vulnerabilities, leading to attacker-controlled code execution
Accidental credential persistence and leakage
Excessive permission scopes and credential grants to runners
Impostor commits and confusable git references
...and much more!

zizmor demo

See zizmor's documentation for installation steps, as well as a quickstart and detailed usage recipes.

License

zizmor is licensed under the MIT License.

Contributing

See our contributing guide!

The name?

Now you can have beautiful clean workflows!

Logo-level sponsors
Grafana Labs	Trail of Bits	Kusari	Tracebit

Name-level sponsors
Alexander Riccio	Carol Willing

Star History

관련 저장소

nektos/act

Run your GitHub Actions locally 🚀

GoGo ModulesMIT Licensegithub-actionsgolang

nektosact.com

71.9k2k

go-gitea/gitea

Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD

GoGo ModulesMIT Licensegiteagolang

gitea.com

57.9k7.1k

fastapi/full-stack-fastapi-template

Full-stack web application template with FastAPI, React, SQLModel, PostgreSQL, Vite, Tailwind CSS, shadcn/ui, FastAPI Cloud, and Docker Compose.

TypeScriptnpmMIT Licensepythondocker

45.5k9k

sdras/awesome-actions

A curated list of awesome actions to use on GitHub

awesomeCreative Commons Zero v1.0 Universalawesomegithub

28.2k1.8k

goreleaser/goreleaser

Release engineering, simplified

GoGo ModuleslibraryMIT Licenserelease-automationpackage

goreleaser.com

16k1.1k

ubicloud/ubicloud

Open source alternative to AWS. Elastic compute, block storage (non replicated), firewall and load balancer, managed Postgres, K8s, AI inference, and IAM services.

RubyRubyGemsGNU Affero General Public License v3.0cloudportable

ubicloud.com

12.3k586

cobusgreyling/loop-engineering

Practical patterns, starters & CLI tools for loop engineering with AI coding agents. Design systems that prompt and orchestrate agents (inspired by Addy Osmani and Boris Cherny). Includes loop-audit, loop-init, loop-cost.

TypeScriptnpmMIT Licenseagentic-aiai-agents

cobusgreyling.github.io/loop-engineering/

11.1k1.5k

Agents365-ai/drawio-skill

From text & real sources to maintainable .drawio architecture models: Diagram IR with source-kind profiles, incremental sync preserving manual layout, multi-view projection, architecture-as-test with a CI action, query/review, what-if, accessible Story Mode, and a built-in MCP server

PythonPyPIskillMIT Licensedrawiodiagram

agents365-ai.github.io/drawio-skill/

9.2k643

community/community

Public feedback discussions for: GitHub Mobile, GitHub Discussions, GitHub Codespaces, GitHub Sponsors, GitHub Issues and more!

RubyRubyGemsCreative Commons Attribution 4.0 Internationalgithubgithub-enterprise

8.7k4.4k

P3TERX/Actions-OpenWrt

A template for building OpenWrt with GitHub Actions | 使用 GitHub Actions 在线云编译 OpenWrt 固件

ShellMIT Licenseopenwrtactions-openwrt

p3terx.com/archives/build-openwrt-with-github-actions.html

7.6k6.9k