Static analysis for GitHub Actions

Navigation

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for woodruffw from gravatar.com woodruffw
Meta

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: MIT
  • Author: William Woodruff <william@yossarian.net>
  • Requires: Python >=3.10
Report project as malware

Project description

🌈 zizmor

zizmor CI Crates.io Packaging status GitHub Sponsors Discord

zizmor is a static analysis tool for GitHub Actions.

It can find many common security issues in typical GitHub Actions CI/CD setups, including:

  • Template injection vulnerabilities, leading to attacker-controlled code execution
  • Accidental credential persistence and leakage
  • Excessive permission scopes and credential grants to runners
  • Impostor commits and confusable git references
  • ...and much more!

zizmor demo

See zizmor's documentation for installation steps, as well as a quickstart and detailed usage recipes.

License

zizmor is licensed under the MIT License.

Contributing

See our contributing guide!

The name?

Now you can have beautiful clean workflows!

Sponsors

zizmor's development is supported by these amazing sponsors!

Logo-level sponsors

Grafana Labs
Trail of Bits
Shipfox
Kusari
Name-level sponsors
Alexander Riccio

Want to see your name or logo above? Consider becoming a sponsor through one of the following:

Star History

Star History Chart

Project details

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for woodruffw from gravatar.com woodruffw
Meta

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: MIT
  • Author: William Woodruff <william@yossarian.net>
  • Requires: Python >=3.10

Release history Release notifications | RSS feed

1.24.1

This version

1.24.0

1.24.0rc3 pre-release

1.24.0rc2 pre-release

1.23.1

1.23.0

1.23.0rc7 pre-release

1.23.0rc6 pre-release

1.23.0rc5 pre-release

1.23.0rc1 pre-release

1.22.0

1.21.0

1.20.0

1.19.0

1.18.0

1.18.0rc3 pre-release

1.18.0rc2 pre-release

1.17.0

1.16.3

1.16.2

1.16.1

1.16.0

1.15.2

1.15.1

1.15.0

1.14.2

1.14.1

1.14.0

1.13.0

1.12.1

1.12.0

1.11.1rc1 pre-release

1.11.0

1.10.0

1.9.0

1.8.0

1.8.0rc2 pre-release

1.8.0rc1 pre-release

1.7.0

1.6.0

1.5.2

1.5.1

1.5.0

1.4.1

1.4.0

1.3.1

1.3.0

1.2.2

1.2.1

1.2.0

1.1.1

1.1.0

1.0.1

1.0.0

0.10.0

0.9.2

0.9.1

0.9.0

0.8.0

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

zizmor-1.24.0.tar.gz (501.3 kB view details)

Uploaded Source

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

zizmor-1.24.0-py3-none-win_amd64.whl (8.5 MB view details)

Uploaded Python 3Windows x86-64

zizmor-1.24.0-py3-none-win32.whl (7.5 MB view details)

Uploaded Python 3Windows x86

zizmor-1.24.0-py3-none-musllinux_1_2_x86_64.whl (9.4 MB view details)

Uploaded Python 3musllinux: musl 1.2+ x86-64

zizmor-1.24.0-py3-none-musllinux_1_2_armv7l.whl (8.4 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARMv7l

zizmor-1.24.0-py3-none-musllinux_1_2_aarch64.whl (8.9 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARM64

zizmor-1.24.0-py3-none-manylinux_2_28_x86_64.whl (9.3 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ x86-64

zizmor-1.24.0-py3-none-manylinux_2_28_armv7l.whl (8.4 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ ARMv7l

zizmor-1.24.0-py3-none-manylinux_2_24_aarch64.whl (8.8 MB view details)

Uploaded Python 3manylinux: glibc 2.24+ ARM64

zizmor-1.24.0-py3-none-macosx_11_0_arm64.whl (8.7 MB view details)

Uploaded Python 3macOS 11.0+ ARM64

zizmor-1.24.0-py3-none-macosx_10_12_x86_64.whl (9.1 MB view details)

Uploaded Python 3macOS 10.12+ x86-64

File details

Details for the file zizmor-1.24.0.tar.gz.

File metadata

  • Download URL: zizmor-1.24.0.tar.gz
  • Upload date:
  • Size: 501.3 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0.tar.gz
Algorithm Hash digest
SHA256 be338442c90d072f6fe74737793b92f2dd8350ba2aefcde157ae77d53e322a47
MD5 184f70f7b55bbbe0189195fb8ae4cad0
BLAKE2b-256 2674b20bae07a1ea4423f8b1bd5be0b4a0229885573d5aa0f9f8cb5c8a7af8ae

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0-py3-none-win_amd64.whl.

File metadata

  • Download URL: zizmor-1.24.0-py3-none-win_amd64.whl
  • Upload date:
  • Size: 8.5 MB
  • Tags: Python 3, Windows x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0-py3-none-win_amd64.whl
Algorithm Hash digest
SHA256 df4b1c224f6eeb2b95aa30a2213d2f0ce8ef5430e90724c4b1d0cc6887ce8997
MD5 75b96f3ca80b58cce262726294a6f14c
BLAKE2b-256 529c27f44865994ad518aac7ef765804507ca99110822c6308449a262ee92289

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0-py3-none-win32.whl.

File metadata

  • Download URL: zizmor-1.24.0-py3-none-win32.whl
  • Upload date:
  • Size: 7.5 MB
  • Tags: Python 3, Windows x86
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0-py3-none-win32.whl
Algorithm Hash digest
SHA256 7c50553784d9a7ee00f78d7818b96639ed2647a1639ac30b2bfe459357216c50
MD5 1e3ea6e0eb140969ca1701e085aec9c9
BLAKE2b-256 6b127435965b9d8337f611decea3ff385d7d9e4be25b9637a76c27ccca49899d

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0-py3-none-musllinux_1_2_x86_64.whl.

File metadata

  • Download URL: zizmor-1.24.0-py3-none-musllinux_1_2_x86_64.whl
  • Upload date:
  • Size: 9.4 MB
  • Tags: Python 3, musllinux: musl 1.2+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0-py3-none-musllinux_1_2_x86_64.whl
Algorithm Hash digest
SHA256 7b101b61878e6bd61f6e2a523d3b037b66cff62e9221fa6426992d1927ed7af5
MD5 54fdebe4deca152f645231f44e248e1f
BLAKE2b-256 577a23ff4a4b8e7cb261104d19fef0c8e0aff669a75b918fce8ad7d7157d4e42

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0-py3-none-musllinux_1_2_armv7l.whl.

File metadata

  • Download URL: zizmor-1.24.0-py3-none-musllinux_1_2_armv7l.whl
  • Upload date:
  • Size: 8.4 MB
  • Tags: Python 3, musllinux: musl 1.2+ ARMv7l
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0-py3-none-musllinux_1_2_armv7l.whl
Algorithm Hash digest
SHA256 b89ecb43dcf66225ad1e1399c60d723d15da8372bfae55a774a55e249332165a
MD5 89642dfe94c281f122043d60e0a48197
BLAKE2b-256 bf2e2f12540803aeb9d2d4b8ac3965b6d927e949b1d1ed7b51a389560134d77f

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0-py3-none-musllinux_1_2_aarch64.whl.

File metadata

  • Download URL: zizmor-1.24.0-py3-none-musllinux_1_2_aarch64.whl
  • Upload date:
  • Size: 8.9 MB
  • Tags: Python 3, musllinux: musl 1.2+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0-py3-none-musllinux_1_2_aarch64.whl
Algorithm Hash digest
SHA256 9799ac5683fbee1dc5ba7422329b8c6e7dcdf92c2e2ff8018f1a6890403530bc
MD5 1862515473243257203f5453b05331d2
BLAKE2b-256 9047264d6cb547471446510b90cbf79e9ac4fac0cc6fac571728bb258acc19e5

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0-py3-none-manylinux_2_28_x86_64.whl.

File metadata

  • Download URL: zizmor-1.24.0-py3-none-manylinux_2_28_x86_64.whl
  • Upload date:
  • Size: 9.3 MB
  • Tags: Python 3, manylinux: glibc 2.28+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0-py3-none-manylinux_2_28_x86_64.whl
Algorithm Hash digest
SHA256 f6364dae78f3b8ed8ed567e5b804ff14a0572f3afab885210eb749eef925f447
MD5 b7f81f3a6d6ee5a57bb2e7a7896087e5
BLAKE2b-256 1079787412bf2f8761501ae0aaa72758114adfef7475573cb6b8e73939a7832e

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0-py3-none-manylinux_2_28_armv7l.whl.

File metadata

  • Download URL: zizmor-1.24.0-py3-none-manylinux_2_28_armv7l.whl
  • Upload date:
  • Size: 8.4 MB
  • Tags: Python 3, manylinux: glibc 2.28+ ARMv7l
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0-py3-none-manylinux_2_28_armv7l.whl
Algorithm Hash digest
SHA256 325b4ed490bad73c9d36b9987e0e306e86219caa2b1f80ee3dccd5c708ff5067
MD5 9fe9d683d410bab51a50ca9fb157735a
BLAKE2b-256 81b3b8aaa403e484c739e96c141282fe1177a48b751b4a959dc85801d81159e4

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0-py3-none-manylinux_2_24_aarch64.whl.

File metadata

  • Download URL: zizmor-1.24.0-py3-none-manylinux_2_24_aarch64.whl
  • Upload date:
  • Size: 8.8 MB
  • Tags: Python 3, manylinux: glibc 2.24+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0-py3-none-manylinux_2_24_aarch64.whl
Algorithm Hash digest
SHA256 b2e03041150c9f62dfd1ff95d93b75dc3e3ca13356563d7fc4bf52119e84df44
MD5 dfe9a005b8be91ae9571be351717c949
BLAKE2b-256 74ee3bc390a11673db042c4e0610f6603a262fbcede7fb678ed2a9d9fb2a79a0

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0-py3-none-macosx_11_0_arm64.whl.

File metadata

  • Download URL: zizmor-1.24.0-py3-none-macosx_11_0_arm64.whl
  • Upload date:
  • Size: 8.7 MB
  • Tags: Python 3, macOS 11.0+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0-py3-none-macosx_11_0_arm64.whl
Algorithm Hash digest
SHA256 e06309df31d3b80014d3e25bdece3c973e53d585c2ed5f37a7505a50b6a575e4
MD5 fef44d4a724c6f33d8d1edf5bacabba7
BLAKE2b-256 662a8a4a5c6e3a2fa88f562a75a1d521c162ec3c0a8519432e8868114af5770d

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0-py3-none-macosx_10_12_x86_64.whl.

File metadata

  • Download URL: zizmor-1.24.0-py3-none-macosx_10_12_x86_64.whl
  • Upload date:
  • Size: 9.1 MB
  • Tags: Python 3, macOS 10.12+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0-py3-none-macosx_10_12_x86_64.whl
Algorithm Hash digest
SHA256 824b98085b3b36e39a878a2c3fbd29957ea4ef96d1933d78bfe67c4f303e0817
MD5 23d3df58939e395fee90b53ed41dd04c
BLAKE2b-256 efcaa230a9402e60b12d0aa7ebf8284b436913e7585715cd0fb56801a73e395b

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page