Static analysis for GitHub Actions

Navigation

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for woodruffw from gravatar.com woodruffw
Meta

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: MIT
  • Author: William Woodruff <william@yossarian.net>
  • Requires: Python >=3.10
Report project as malware

Project description

🌈 zizmor

zizmor CI Crates.io Packaging status GitHub Sponsors Discord

zizmor is a static analysis tool for GitHub Actions.

It can find many common security issues in typical GitHub Actions CI/CD setups, including:

  • Template injection vulnerabilities, leading to attacker-controlled code execution
  • Accidental credential persistence and leakage
  • Excessive permission scopes and credential grants to runners
  • Impostor commits and confusable git references
  • ...and much more!

zizmor demo

See zizmor's documentation for installation steps, as well as a quickstart and detailed usage recipes.

License

zizmor is licensed under the MIT License.

Contributing

See our contributing guide!

The name?

Now you can have beautiful clean workflows!

Sponsors

zizmor's development is supported by these amazing sponsors!

Logo-level sponsors

Grafana Labs
Trail of Bits
Shipfox
Kusari
Name-level sponsors
Alexander Riccio

Want to see your name or logo above? Consider becoming a sponsor through one of the following:

Star History

Star History Chart

Project details

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for woodruffw from gravatar.com woodruffw
Meta

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: MIT
  • Author: William Woodruff <william@yossarian.net>
  • Requires: Python >=3.10

Release history Release notifications | RSS feed

1.24.1

1.24.0

1.24.0rc3 pre-release

This version

1.24.0rc2 pre-release

1.23.1

1.23.0

1.23.0rc7 pre-release

1.23.0rc6 pre-release

1.23.0rc5 pre-release

1.23.0rc1 pre-release

1.22.0

1.21.0

1.20.0

1.19.0

1.18.0

1.18.0rc3 pre-release

1.18.0rc2 pre-release

1.17.0

1.16.3

1.16.2

1.16.1

1.16.0

1.15.2

1.15.1

1.15.0

1.14.2

1.14.1

1.14.0

1.13.0

1.12.1

1.12.0

1.11.1rc1 pre-release

1.11.0

1.10.0

1.9.0

1.8.0

1.8.0rc2 pre-release

1.8.0rc1 pre-release

1.7.0

1.6.0

1.5.2

1.5.1

1.5.0

1.4.1

1.4.0

1.3.1

1.3.0

1.2.2

1.2.1

1.2.0

1.1.1

1.1.0

1.0.1

1.0.0

0.10.0

0.9.2

0.9.1

0.9.0

0.8.0

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

zizmor-1.24.0rc2.tar.gz (502.0 kB view details)

Uploaded Source

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

zizmor-1.24.0rc2-py3-none-win_amd64.whl (8.5 MB view details)

Uploaded Python 3Windows x86-64

zizmor-1.24.0rc2-py3-none-win32.whl (7.5 MB view details)

Uploaded Python 3Windows x86

zizmor-1.24.0rc2-py3-none-musllinux_1_2_x86_64.whl (9.4 MB view details)

Uploaded Python 3musllinux: musl 1.2+ x86-64

zizmor-1.24.0rc2-py3-none-musllinux_1_2_armv7l.whl (8.4 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARMv7l

zizmor-1.24.0rc2-py3-none-musllinux_1_2_aarch64.whl (8.9 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARM64

zizmor-1.24.0rc2-py3-none-manylinux_2_28_x86_64.whl (9.3 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ x86-64

zizmor-1.24.0rc2-py3-none-manylinux_2_28_armv7l.whl (8.4 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ ARMv7l

zizmor-1.24.0rc2-py3-none-manylinux_2_24_aarch64.whl (8.8 MB view details)

Uploaded Python 3manylinux: glibc 2.24+ ARM64

zizmor-1.24.0rc2-py3-none-macosx_11_0_arm64.whl (8.7 MB view details)

Uploaded Python 3macOS 11.0+ ARM64

zizmor-1.24.0rc2-py3-none-macosx_10_12_x86_64.whl (9.1 MB view details)

Uploaded Python 3macOS 10.12+ x86-64

File details

Details for the file zizmor-1.24.0rc2.tar.gz.

File metadata

  • Download URL: zizmor-1.24.0rc2.tar.gz
  • Upload date:
  • Size: 502.0 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc2.tar.gz
Algorithm Hash digest
SHA256 78744deac33829c37c5e7d5a1a3f03ed054af8aae4f9be438a520c94f57637f7
MD5 16b6a7f8b543a5b744369c00787452b8
BLAKE2b-256 503a2170e63dd38a3e37f7f8fb289ac81e7a72356d22c7c7a95ba6c53638f73d

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0rc2-py3-none-win_amd64.whl.

File metadata

  • Download URL: zizmor-1.24.0rc2-py3-none-win_amd64.whl
  • Upload date:
  • Size: 8.5 MB
  • Tags: Python 3, Windows x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc2-py3-none-win_amd64.whl
Algorithm Hash digest
SHA256 2f48bf9c4f932a940702724760d201592dc6d846723889aee199c183854612fb
MD5 6d68e073f833fe5fed68d69abd53f471
BLAKE2b-256 aa9e9dc1d50dfeaaf248ba4f8db78ef2b728dc4dea27c8ff0411ae2b3729e847

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0rc2-py3-none-win32.whl.

File metadata

  • Download URL: zizmor-1.24.0rc2-py3-none-win32.whl
  • Upload date:
  • Size: 7.5 MB
  • Tags: Python 3, Windows x86
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc2-py3-none-win32.whl
Algorithm Hash digest
SHA256 16ae1f3cefa27dfe1c505a0b5b89d5f13c8fc5b03f5482b809c58755438e66f4
MD5 c68b89b2b594e2cbd1e63272e90a6d54
BLAKE2b-256 8b5ee40d9579c9f152d719467b122bdf45979414b970b61caae151f0e6bad7c2

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0rc2-py3-none-musllinux_1_2_x86_64.whl.

File metadata

  • Download URL: zizmor-1.24.0rc2-py3-none-musllinux_1_2_x86_64.whl
  • Upload date:
  • Size: 9.4 MB
  • Tags: Python 3, musllinux: musl 1.2+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc2-py3-none-musllinux_1_2_x86_64.whl
Algorithm Hash digest
SHA256 a776619ea7882fe2ed2eaf7496152045e30dcb9c41a8976d653ceb210d067ecf
MD5 16f6c30926bbac64f508cdf710b4e224
BLAKE2b-256 4f095de55aa96edee0f3292589d52fc62e4df24734b1d4f0de6c3183a51fe4f5

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0rc2-py3-none-musllinux_1_2_armv7l.whl.

File metadata

  • Download URL: zizmor-1.24.0rc2-py3-none-musllinux_1_2_armv7l.whl
  • Upload date:
  • Size: 8.4 MB
  • Tags: Python 3, musllinux: musl 1.2+ ARMv7l
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc2-py3-none-musllinux_1_2_armv7l.whl
Algorithm Hash digest
SHA256 ee3caacfd8afacf4b4ced3c903f007d8a645f32ab1f6bf75af7eb1ff69c002e3
MD5 643a40b3364e9e3e93556f96c2bd93c0
BLAKE2b-256 eb633414669e31314802055da380592d4bd2f6d6b6198995fcbfc9a371e3f6a7

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0rc2-py3-none-musllinux_1_2_aarch64.whl.

File metadata

  • Download URL: zizmor-1.24.0rc2-py3-none-musllinux_1_2_aarch64.whl
  • Upload date:
  • Size: 8.9 MB
  • Tags: Python 3, musllinux: musl 1.2+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc2-py3-none-musllinux_1_2_aarch64.whl
Algorithm Hash digest
SHA256 77a266c405bb1d315dd14d0bb5a5713b4c74684e59d9e7edecf40ba6da4817e9
MD5 e5d2e466504be49a86a3ae90b14833b4
BLAKE2b-256 010e14296e4d693e9f04dbf3e4add76d12ed2c99fdc0f5897092b0d53066fd42

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0rc2-py3-none-manylinux_2_28_x86_64.whl.

File metadata

  • Download URL: zizmor-1.24.0rc2-py3-none-manylinux_2_28_x86_64.whl
  • Upload date:
  • Size: 9.3 MB
  • Tags: Python 3, manylinux: glibc 2.28+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc2-py3-none-manylinux_2_28_x86_64.whl
Algorithm Hash digest
SHA256 22d633dd302225de7a68064debcbbb2df0b5c763603a89db0f251dc4d006acf5
MD5 4ca029af8b668bfb21695ec57a48389b
BLAKE2b-256 070213f2f0b9e0f2fd525b272d607880a8c59f114e997d9100d9a89662242c35

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0rc2-py3-none-manylinux_2_28_armv7l.whl.

File metadata

  • Download URL: zizmor-1.24.0rc2-py3-none-manylinux_2_28_armv7l.whl
  • Upload date:
  • Size: 8.4 MB
  • Tags: Python 3, manylinux: glibc 2.28+ ARMv7l
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc2-py3-none-manylinux_2_28_armv7l.whl
Algorithm Hash digest
SHA256 7b44b60cffed85ce69e78216e6d14268591b94df3feee2fe3c31bbd850e2e56e
MD5 37f2f499608b99abb4001b1486040ae5
BLAKE2b-256 c385c3efad5fa57440e007b49356bc1b45a02d53fc7637fce79fdf2e23768bd9

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0rc2-py3-none-manylinux_2_24_aarch64.whl.

File metadata

  • Download URL: zizmor-1.24.0rc2-py3-none-manylinux_2_24_aarch64.whl
  • Upload date:
  • Size: 8.8 MB
  • Tags: Python 3, manylinux: glibc 2.24+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc2-py3-none-manylinux_2_24_aarch64.whl
Algorithm Hash digest
SHA256 3afd36959fbf3d7f895f161200d92acbb839dc249bce694562649576f5faa75d
MD5 97a05865e7a7f71260189b5ef7b70c98
BLAKE2b-256 4dee28df35cd14b3edcd6a5d3a9085486890f88cbe2ea1acc87f294eb887beb6

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0rc2-py3-none-macosx_11_0_arm64.whl.

File metadata

  • Download URL: zizmor-1.24.0rc2-py3-none-macosx_11_0_arm64.whl
  • Upload date:
  • Size: 8.7 MB
  • Tags: Python 3, macOS 11.0+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc2-py3-none-macosx_11_0_arm64.whl
Algorithm Hash digest
SHA256 08378f89711a2236e281bf92cf77fc767d75928882b5b6f24659df4b804e6faf
MD5 b1ec9cb310d4a8e177a2fb71e23cb5c5
BLAKE2b-256 b2f43d051bb54c7e3250e8cb520582f98a2784ead73ac8863f504fe69a133716

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0rc2-py3-none-macosx_10_12_x86_64.whl.

File metadata

  • Download URL: zizmor-1.24.0rc2-py3-none-macosx_10_12_x86_64.whl
  • Upload date:
  • Size: 9.1 MB
  • Tags: Python 3, macOS 10.12+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc2-py3-none-macosx_10_12_x86_64.whl
Algorithm Hash digest
SHA256 621096654ecc9dc25aff1eac5cb5a4cd59c060990614d0f5dcade6f5ee45702e
MD5 ab7e5982c189ae31f5d2a0de56ba8b16
BLAKE2b-256 635d4721c29c877f90d7276cd7aefc9e4bb9b37988d7d19bf7943355f21b0021

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page