Static analysis for GitHub Actions

Navigation

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for woodruffw from gravatar.com woodruffw
Meta

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: MIT
  • Author: William Woodruff <william@yossarian.net>
  • Requires: Python >=3.10
Report project as malware

Project description

🌈 zizmor

zizmor CI Crates.io Packaging status GitHub Sponsors Discord

zizmor is a static analysis tool for GitHub Actions.

It can find many common security issues in typical GitHub Actions CI/CD setups, including:

  • Template injection vulnerabilities, leading to attacker-controlled code execution
  • Accidental credential persistence and leakage
  • Excessive permission scopes and credential grants to runners
  • Impostor commits and confusable git references
  • ...and much more!

zizmor demo

See zizmor's documentation for installation steps, as well as a quickstart and detailed usage recipes.

License

zizmor is licensed under the MIT License.

Contributing

See our contributing guide!

The name?

Now you can have beautiful clean workflows!

Sponsors

zizmor's development is supported by these amazing sponsors!

Logo-level sponsors

Grafana Labs
Trail of Bits
Shipfox
Kusari
Name-level sponsors
Alexander Riccio

Want to see your name or logo above? Consider becoming a sponsor through one of the following:

Star History

Star History Chart

Project details

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for woodruffw from gravatar.com woodruffw
Meta

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: MIT
  • Author: William Woodruff <william@yossarian.net>
  • Requires: Python >=3.10

Release history Release notifications | RSS feed

1.24.1

1.24.0

This version

1.24.0rc3 pre-release

1.24.0rc2 pre-release

1.23.1

1.23.0

1.23.0rc7 pre-release

1.23.0rc6 pre-release

1.23.0rc5 pre-release

1.23.0rc1 pre-release

1.22.0

1.21.0

1.20.0

1.19.0

1.18.0

1.18.0rc3 pre-release

1.18.0rc2 pre-release

1.17.0

1.16.3

1.16.2

1.16.1

1.16.0

1.15.2

1.15.1

1.15.0

1.14.2

1.14.1

1.14.0

1.13.0

1.12.1

1.12.0

1.11.1rc1 pre-release

1.11.0

1.10.0

1.9.0

1.8.0

1.8.0rc2 pre-release

1.8.0rc1 pre-release

1.7.0

1.6.0

1.5.2

1.5.1

1.5.0

1.4.1

1.4.0

1.3.1

1.3.0

1.2.2

1.2.1

1.2.0

1.1.1

1.1.0

1.0.1

1.0.0

0.10.0

0.9.2

0.9.1

0.9.0

0.8.0

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

zizmor-1.24.0rc3.tar.gz (501.9 kB view details)

Uploaded Source

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

zizmor-1.24.0rc3-py3-none-win_amd64.whl (8.5 MB view details)

Uploaded Python 3Windows x86-64

zizmor-1.24.0rc3-py3-none-win32.whl (7.5 MB view details)

Uploaded Python 3Windows x86

zizmor-1.24.0rc3-py3-none-musllinux_1_2_x86_64.whl (9.3 MB view details)

Uploaded Python 3musllinux: musl 1.2+ x86-64

zizmor-1.24.0rc3-py3-none-musllinux_1_2_armv7l.whl (8.4 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARMv7l

zizmor-1.24.0rc3-py3-none-musllinux_1_2_aarch64.whl (8.9 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARM64

zizmor-1.24.0rc3-py3-none-manylinux_2_28_x86_64.whl (9.3 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ x86-64

zizmor-1.24.0rc3-py3-none-manylinux_2_28_armv7l.whl (8.4 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ ARMv7l

zizmor-1.24.0rc3-py3-none-manylinux_2_24_aarch64.whl (8.8 MB view details)

Uploaded Python 3manylinux: glibc 2.24+ ARM64

zizmor-1.24.0rc3-py3-none-macosx_11_0_arm64.whl (8.7 MB view details)

Uploaded Python 3macOS 11.0+ ARM64

zizmor-1.24.0rc3-py3-none-macosx_10_12_x86_64.whl (9.1 MB view details)

Uploaded Python 3macOS 10.12+ x86-64

File details

Details for the file zizmor-1.24.0rc3.tar.gz.

File metadata

  • Download URL: zizmor-1.24.0rc3.tar.gz
  • Upload date:
  • Size: 501.9 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc3.tar.gz
Algorithm Hash digest
SHA256 34b4f9d276711a058ae1d0d0ac25c655ad47d1cf349f411b5e99fa41eb74c2bb
MD5 ebf3f43efc7a9c85f2cc42ffd9ac29a1
BLAKE2b-256 413de4ced0bebeea8ce79bcd707db58f8b7f1220257295f72a5ffe3a2359cde3

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0rc3-py3-none-win_amd64.whl.

File metadata

  • Download URL: zizmor-1.24.0rc3-py3-none-win_amd64.whl
  • Upload date:
  • Size: 8.5 MB
  • Tags: Python 3, Windows x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc3-py3-none-win_amd64.whl
Algorithm Hash digest
SHA256 456b45b0988f554145b910d39dc51de87b7d7af509c50dcb249eb0360a9e385f
MD5 c02dd7204d1f20badebd3d5fa946944f
BLAKE2b-256 102476bc3dfc3c4fa61af0f7c5ec831aa7a9c224f9ccbbb2865514c5f1730a86

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0rc3-py3-none-win32.whl.

File metadata

  • Download URL: zizmor-1.24.0rc3-py3-none-win32.whl
  • Upload date:
  • Size: 7.5 MB
  • Tags: Python 3, Windows x86
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc3-py3-none-win32.whl
Algorithm Hash digest
SHA256 8f2971cdbea55066a2267a9e63e6bcafdee95b780035e20bafe4c87d152b03ff
MD5 478a9ed59605216c15e972af367c8df7
BLAKE2b-256 2fd485f16fb326a53bcb5e5133fd24139316108c8d4dc1880bc6fdf7b8292966

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0rc3-py3-none-musllinux_1_2_x86_64.whl.

File metadata

  • Download URL: zizmor-1.24.0rc3-py3-none-musllinux_1_2_x86_64.whl
  • Upload date:
  • Size: 9.3 MB
  • Tags: Python 3, musllinux: musl 1.2+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc3-py3-none-musllinux_1_2_x86_64.whl
Algorithm Hash digest
SHA256 4b59665ab6c28ea4ffff2bc6f482b20523ce860068e84c6b0061725a1c0b77ad
MD5 47394595758fcc6fe133f73b9380ad87
BLAKE2b-256 46b69604ec6afa27b3cee9408e0a4901bf5c2ca3eaeb624107ddfa5044b5689b

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0rc3-py3-none-musllinux_1_2_armv7l.whl.

File metadata

  • Download URL: zizmor-1.24.0rc3-py3-none-musllinux_1_2_armv7l.whl
  • Upload date:
  • Size: 8.4 MB
  • Tags: Python 3, musllinux: musl 1.2+ ARMv7l
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc3-py3-none-musllinux_1_2_armv7l.whl
Algorithm Hash digest
SHA256 4fbc03ae854348b0babd6ddae1663dfdd2a74acdddaedd81e682276e8668174b
MD5 13ec8075d27978a584adaedd0f3640d4
BLAKE2b-256 8da97c29e933560bbca60dc220bb81b14a47f8dce165cfea20bb716b636c2bb3

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0rc3-py3-none-musllinux_1_2_aarch64.whl.

File metadata

  • Download URL: zizmor-1.24.0rc3-py3-none-musllinux_1_2_aarch64.whl
  • Upload date:
  • Size: 8.9 MB
  • Tags: Python 3, musllinux: musl 1.2+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc3-py3-none-musllinux_1_2_aarch64.whl
Algorithm Hash digest
SHA256 436a5bacef6b2255fe6c67df71966e35f5ba6bf42e862aa4609b03225ee5d6c0
MD5 b212b58ef633c38162368e780593336c
BLAKE2b-256 58043985fe068fe646b14124f8b23ad74aacf791231c10a86d18237414d85abb

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0rc3-py3-none-manylinux_2_28_x86_64.whl.

File metadata

  • Download URL: zizmor-1.24.0rc3-py3-none-manylinux_2_28_x86_64.whl
  • Upload date:
  • Size: 9.3 MB
  • Tags: Python 3, manylinux: glibc 2.28+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc3-py3-none-manylinux_2_28_x86_64.whl
Algorithm Hash digest
SHA256 26210a1c534b88c85a3da7b78c5c718cfe7b66e2700fee30db541761c859c873
MD5 c10fe0d48c449fe58dcc823cc78ad845
BLAKE2b-256 97063b25b1c36f88fe5df6103e23a52470f527414008b46b82615a7cdc3c6617

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0rc3-py3-none-manylinux_2_28_armv7l.whl.

File metadata

  • Download URL: zizmor-1.24.0rc3-py3-none-manylinux_2_28_armv7l.whl
  • Upload date:
  • Size: 8.4 MB
  • Tags: Python 3, manylinux: glibc 2.28+ ARMv7l
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc3-py3-none-manylinux_2_28_armv7l.whl
Algorithm Hash digest
SHA256 348a5ce4baaf67e9589e9aed91d73f19ab0bb1e393ba862312baa1bdae136b92
MD5 a6cb9b20f450be1413db86bbf8c929c1
BLAKE2b-256 ae12ad3edba57ffd73f28de6f9bf159c42f3825706acca352cb0e78890d82d2d

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0rc3-py3-none-manylinux_2_24_aarch64.whl.

File metadata

  • Download URL: zizmor-1.24.0rc3-py3-none-manylinux_2_24_aarch64.whl
  • Upload date:
  • Size: 8.8 MB
  • Tags: Python 3, manylinux: glibc 2.24+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc3-py3-none-manylinux_2_24_aarch64.whl
Algorithm Hash digest
SHA256 d2b78fa9d68c65fb08c6bbe74faff4e60fb4254a7265b8bb5cdd5645a18a04dc
MD5 3c33214891c2a5ecacbaff64e8492a5a
BLAKE2b-256 e83224ca23ad4126087446a6596fb51ce3aa56d211a3eb5628656c04e7246205

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0rc3-py3-none-macosx_11_0_arm64.whl.

File metadata

  • Download URL: zizmor-1.24.0rc3-py3-none-macosx_11_0_arm64.whl
  • Upload date:
  • Size: 8.7 MB
  • Tags: Python 3, macOS 11.0+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc3-py3-none-macosx_11_0_arm64.whl
Algorithm Hash digest
SHA256 0d78e739922380d4bf897917f064f4e8635ee5036ad8324cc9d312dcafc45621
MD5 4a6a3bc84fd668c748fae6c2997c9730
BLAKE2b-256 df4e98ef318ee6ee825b318e7c7029eab63bad9e33dcc20d0cc88593d9b56e7d

See more details on using hashes here.

File details

Details for the file zizmor-1.24.0rc3-py3-none-macosx_10_12_x86_64.whl.

File metadata

  • Download URL: zizmor-1.24.0rc3-py3-none-macosx_10_12_x86_64.whl
  • Upload date:
  • Size: 9.1 MB
  • Tags: Python 3, macOS 10.12+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.0rc3-py3-none-macosx_10_12_x86_64.whl
Algorithm Hash digest
SHA256 eb025a05746be7cfce3a642d645340cabfb8438be9ab1e6b212e3cec0006d9ca
MD5 81209b42098596e5a065673c737fb3d1
BLAKE2b-256 ec1226afbd9e535f914b9a1760f6630fe3b847a8ffb9dc2ed6fda72a072067f4

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page