Static analysis for GitHub Actions

Navigation

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for woodruffw from gravatar.com woodruffw
Meta

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: MIT
  • Author: William Woodruff <william@yossarian.net>
  • Requires: Python >=3.10
Report project as malware

Project description

🌈 zizmor

zizmor CI Crates.io Packaging status GitHub Sponsors Discord

zizmor is a static analysis tool for GitHub Actions.

It can find many common security issues in typical GitHub Actions CI/CD setups, including:

  • Template injection vulnerabilities, leading to attacker-controlled code execution
  • Accidental credential persistence and leakage
  • Excessive permission scopes and credential grants to runners
  • Impostor commits and confusable git references
  • ...and much more!

zizmor demo

See zizmor's documentation for installation steps, as well as a quickstart and detailed usage recipes.

License

zizmor is licensed under the MIT License.

Contributing

See our contributing guide!

The name?

Now you can have beautiful clean workflows!

Sponsors

zizmor's development is supported by these amazing sponsors!

Logo-level sponsors

Grafana Labs
Trail of Bits
Shipfox
Kusari
Tracebit
Name-level sponsors
Alexander Riccio

Want to see your name or logo above? Consider becoming a sponsor through one of the following:

Star History

Star History Chart

Project details

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for woodruffw from gravatar.com woodruffw
Meta

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: MIT
  • Author: William Woodruff <william@yossarian.net>
  • Requires: Python >=3.10

Release history Release notifications | RSS feed

This version

1.25.2

1.25.1

1.25.0

1.24.1

1.24.0

1.24.0rc3 pre-release

1.24.0rc2 pre-release

1.23.1

1.23.0

1.23.0rc7 pre-release

1.23.0rc6 pre-release

1.23.0rc5 pre-release

1.23.0rc1 pre-release

1.22.0

1.21.0

1.20.0

1.19.0

1.18.0

1.18.0rc3 pre-release

1.18.0rc2 pre-release

1.17.0

1.16.3

1.16.2

1.16.1

1.16.0

1.15.2

1.15.1

1.15.0

1.14.2

1.14.1

1.14.0

1.13.0

1.12.1

1.12.0

1.11.1rc1 pre-release

1.11.0

1.10.0

1.9.0

1.8.0

1.8.0rc2 pre-release

1.8.0rc1 pre-release

1.7.0

1.6.0

1.5.2

1.5.1

1.5.0

1.4.1

1.4.0

1.3.1

1.3.0

1.2.2

1.2.1

1.2.0

1.1.1

1.1.0

1.0.1

1.0.0

0.10.0

0.9.2

0.9.1

0.9.0

0.8.0

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

zizmor-1.25.2.tar.gz (517.8 kB view details)

Uploaded Source

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

zizmor-1.25.2-py3-none-win_amd64.whl (8.6 MB view details)

Uploaded Python 3Windows x86-64

zizmor-1.25.2-py3-none-win32.whl (7.5 MB view details)

Uploaded Python 3Windows x86

zizmor-1.25.2-py3-none-musllinux_1_2_x86_64.whl (9.4 MB view details)

Uploaded Python 3musllinux: musl 1.2+ x86-64

zizmor-1.25.2-py3-none-musllinux_1_2_armv7l.whl (8.4 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARMv7l

zizmor-1.25.2-py3-none-musllinux_1_2_aarch64.whl (8.9 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARM64

zizmor-1.25.2-py3-none-manylinux_2_28_x86_64.whl (9.3 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ x86-64

zizmor-1.25.2-py3-none-manylinux_2_28_armv7l.whl (8.4 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ ARMv7l

zizmor-1.25.2-py3-none-manylinux_2_24_aarch64.whl (8.8 MB view details)

Uploaded Python 3manylinux: glibc 2.24+ ARM64

zizmor-1.25.2-py3-none-macosx_11_0_arm64.whl (8.7 MB view details)

Uploaded Python 3macOS 11.0+ ARM64

zizmor-1.25.2-py3-none-macosx_10_12_x86_64.whl (9.1 MB view details)

Uploaded Python 3macOS 10.12+ x86-64

File details

Details for the file zizmor-1.25.2.tar.gz.

File metadata

  • Download URL: zizmor-1.25.2.tar.gz
  • Upload date:
  • Size: 517.8 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.2.tar.gz
Algorithm Hash digest
SHA256 f26ffeb16659c8922c7b08203ca5a4f8bf5e1a7e8d190734961c40877cf778ea
MD5 03379e90ffc44c28c149316c8c592ec7
BLAKE2b-256 b3418987d546e3101cc76748b2f1b0ccda58e244773ef5124d39e7e749e3d6e4

See more details on using hashes here.

File details

Details for the file zizmor-1.25.2-py3-none-win_amd64.whl.

File metadata

  • Download URL: zizmor-1.25.2-py3-none-win_amd64.whl
  • Upload date:
  • Size: 8.6 MB
  • Tags: Python 3, Windows x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.2-py3-none-win_amd64.whl
Algorithm Hash digest
SHA256 af55bd9bd119ea8cbce2a7addc3922503019de32c1fe31106d70b3dc77d77908
MD5 ed2f619456d62207e20d750fcb2588df
BLAKE2b-256 d2811cb088098bd53f9b910098b0c19d06dc587acf328a170ef8afd1cd93b482

See more details on using hashes here.

File details

Details for the file zizmor-1.25.2-py3-none-win32.whl.

File metadata

  • Download URL: zizmor-1.25.2-py3-none-win32.whl
  • Upload date:
  • Size: 7.5 MB
  • Tags: Python 3, Windows x86
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.2-py3-none-win32.whl
Algorithm Hash digest
SHA256 aa9f4c43b499c55339c3ef2e885133c5017cd9a18d76d9335541203cfa5ae1e7
MD5 f51a9a184dd474a7a619eb4507edc6e2
BLAKE2b-256 b53fdcb85fb9a0d87794847f9043f9db9bb4d274cf4b8077604bc13850c8fdb4

See more details on using hashes here.

File details

Details for the file zizmor-1.25.2-py3-none-musllinux_1_2_x86_64.whl.

File metadata

  • Download URL: zizmor-1.25.2-py3-none-musllinux_1_2_x86_64.whl
  • Upload date:
  • Size: 9.4 MB
  • Tags: Python 3, musllinux: musl 1.2+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.2-py3-none-musllinux_1_2_x86_64.whl
Algorithm Hash digest
SHA256 b75c84d7387389f95edadbe859fb2aaf0a360c5b080932cc53e92ae1db6f09ef
MD5 18b09aa4ab46f8ce9e2d0c0c07d9dbd7
BLAKE2b-256 2b3b0fd93b77171c8f229e8e1304eecc9931bf3009f722c57967d545d9f151b6

See more details on using hashes here.

File details

Details for the file zizmor-1.25.2-py3-none-musllinux_1_2_armv7l.whl.

File metadata

  • Download URL: zizmor-1.25.2-py3-none-musllinux_1_2_armv7l.whl
  • Upload date:
  • Size: 8.4 MB
  • Tags: Python 3, musllinux: musl 1.2+ ARMv7l
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.2-py3-none-musllinux_1_2_armv7l.whl
Algorithm Hash digest
SHA256 d670a1e2f00b3cd56febd145bc1a0b2c4caf1cbe5dad8128721843fa877e2d2e
MD5 0e6bfcad746ac22f641cb275739e87d5
BLAKE2b-256 cabca46f11377cdc145c625d62d88c30fead56f9d29bc31652069a1a0eaed6c2

See more details on using hashes here.

File details

Details for the file zizmor-1.25.2-py3-none-musllinux_1_2_aarch64.whl.

File metadata

  • Download URL: zizmor-1.25.2-py3-none-musllinux_1_2_aarch64.whl
  • Upload date:
  • Size: 8.9 MB
  • Tags: Python 3, musllinux: musl 1.2+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.2-py3-none-musllinux_1_2_aarch64.whl
Algorithm Hash digest
SHA256 dbb1b5c85b8de8eaa0227c6620f06c8e4fbd0a4da2086e218bc225c0bef0923d
MD5 0bac56ce60a5bc1ebc5cd44310030ee3
BLAKE2b-256 cf78fc7717c706bde7531b2fde12003994fbc04c47ab4f91aa6ca9b3b24b30fd

See more details on using hashes here.

File details

Details for the file zizmor-1.25.2-py3-none-manylinux_2_28_x86_64.whl.

File metadata

  • Download URL: zizmor-1.25.2-py3-none-manylinux_2_28_x86_64.whl
  • Upload date:
  • Size: 9.3 MB
  • Tags: Python 3, manylinux: glibc 2.28+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.2-py3-none-manylinux_2_28_x86_64.whl
Algorithm Hash digest
SHA256 c4246f1344d8dbeffc044d7bb11b131773a7db7eb57d9073c45942dfd3543a1f
MD5 9d286a54d7b07db2589a1a3299ecc42d
BLAKE2b-256 4b13445bc98acc2c976d6b8f8ca59b9c09f055adb5ffb3445d99af8ff7efcb4f

See more details on using hashes here.

File details

Details for the file zizmor-1.25.2-py3-none-manylinux_2_28_armv7l.whl.

File metadata

  • Download URL: zizmor-1.25.2-py3-none-manylinux_2_28_armv7l.whl
  • Upload date:
  • Size: 8.4 MB
  • Tags: Python 3, manylinux: glibc 2.28+ ARMv7l
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.2-py3-none-manylinux_2_28_armv7l.whl
Algorithm Hash digest
SHA256 0beba1601be08bd00c9277e6ed4b026e125b26b379d86d6d98eb708409b3050d
MD5 c1577bfb8e3d5f23d20291655546ce65
BLAKE2b-256 4682f3e8d9b6d941194f2558591b449c106d46a16ea566b95eccff3a83bf6acc

See more details on using hashes here.

File details

Details for the file zizmor-1.25.2-py3-none-manylinux_2_24_aarch64.whl.

File metadata

  • Download URL: zizmor-1.25.2-py3-none-manylinux_2_24_aarch64.whl
  • Upload date:
  • Size: 8.8 MB
  • Tags: Python 3, manylinux: glibc 2.24+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.2-py3-none-manylinux_2_24_aarch64.whl
Algorithm Hash digest
SHA256 cf64374149b567c9373228b76c8e77a389b4071899f84b82c36ee50fab894e79
MD5 1fec692fcb716ead0cbe28c7082d8858
BLAKE2b-256 523ed60939d1cc4907c0d021a7c46362aab5e8045550bb09157d56c070e43568

See more details on using hashes here.

File details

Details for the file zizmor-1.25.2-py3-none-macosx_11_0_arm64.whl.

File metadata

  • Download URL: zizmor-1.25.2-py3-none-macosx_11_0_arm64.whl
  • Upload date:
  • Size: 8.7 MB
  • Tags: Python 3, macOS 11.0+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.2-py3-none-macosx_11_0_arm64.whl
Algorithm Hash digest
SHA256 d3e301eb4465e2da77857cf01ab4ef0184cf3818e826800b270ab01ae7338977
MD5 e61050d7b6973cbe212e35c1ade5cfc5
BLAKE2b-256 c2c066453a2553a66286a96ca32d75e3e6bcc94ce7f907cd5f8c2c3fce55315e

See more details on using hashes here.

File details

Details for the file zizmor-1.25.2-py3-none-macosx_10_12_x86_64.whl.

File metadata

  • Download URL: zizmor-1.25.2-py3-none-macosx_10_12_x86_64.whl
  • Upload date:
  • Size: 9.1 MB
  • Tags: Python 3, macOS 10.12+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.2-py3-none-macosx_10_12_x86_64.whl
Algorithm Hash digest
SHA256 17cc8cfd9d472e8b11945a869c198d25cfdf4a33f36fa7a1f9674099f5fb509d
MD5 18fb643f4eda4a0c97bf35bcb2ed274a
BLAKE2b-256 dcbd84108a92ccbfda0d28efc11f382997c7a767b58863bf4a550634b8cf0211

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page