Static analysis for GitHub Actions

Navigation

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for woodruffw from gravatar.com woodruffw
Meta

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: MIT
  • Author: William Woodruff <william@yossarian.net>
  • Requires: Python >=3.10
Report project as malware

Project description

🌈 zizmor

zizmor CI Crates.io Packaging status GitHub Sponsors Discord

zizmor is a static analysis tool for GitHub Actions.

It can find many common security issues in typical GitHub Actions CI/CD setups, including:

  • Template injection vulnerabilities, leading to attacker-controlled code execution
  • Accidental credential persistence and leakage
  • Excessive permission scopes and credential grants to runners
  • Impostor commits and confusable git references
  • ...and much more!

zizmor demo

See zizmor's documentation for installation steps, as well as a quickstart and detailed usage recipes.

License

zizmor is licensed under the MIT License.

Contributing

See our contributing guide!

The name?

Now you can have beautiful clean workflows!

Sponsors

zizmor's development is supported by these amazing sponsors!

Logo-level sponsors

Grafana Labs
Trail of Bits
Shipfox
Kusari
Name-level sponsors
Alexander Riccio

Want to see your name or logo above? Consider becoming a sponsor through one of the following:

Star History

Star History Chart

Project details

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for woodruffw from gravatar.com woodruffw
Meta

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: MIT
  • Author: William Woodruff <william@yossarian.net>
  • Requires: Python >=3.10

Release history Release notifications | RSS feed

This version

1.24.1

1.24.0

1.24.0rc3 pre-release

1.24.0rc2 pre-release

1.23.1

1.23.0

1.23.0rc7 pre-release

1.23.0rc6 pre-release

1.23.0rc5 pre-release

1.23.0rc1 pre-release

1.22.0

1.21.0

1.20.0

1.19.0

1.18.0

1.18.0rc3 pre-release

1.18.0rc2 pre-release

1.17.0

1.16.3

1.16.2

1.16.1

1.16.0

1.15.2

1.15.1

1.15.0

1.14.2

1.14.1

1.14.0

1.13.0

1.12.1

1.12.0

1.11.1rc1 pre-release

1.11.0

1.10.0

1.9.0

1.8.0

1.8.0rc2 pre-release

1.8.0rc1 pre-release

1.7.0

1.6.0

1.5.2

1.5.1

1.5.0

1.4.1

1.4.0

1.3.1

1.3.0

1.2.2

1.2.1

1.2.0

1.1.1

1.1.0

1.0.1

1.0.0

0.10.0

0.9.2

0.9.1

0.9.0

0.8.0

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

zizmor-1.24.1.tar.gz (501.4 kB view details)

Uploaded Source

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

zizmor-1.24.1-py3-none-win_amd64.whl (8.6 MB view details)

Uploaded Python 3Windows x86-64

zizmor-1.24.1-py3-none-win32.whl (7.5 MB view details)

Uploaded Python 3Windows x86

zizmor-1.24.1-py3-none-musllinux_1_2_x86_64.whl (9.4 MB view details)

Uploaded Python 3musllinux: musl 1.2+ x86-64

zizmor-1.24.1-py3-none-musllinux_1_2_armv7l.whl (8.4 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARMv7l

zizmor-1.24.1-py3-none-musllinux_1_2_aarch64.whl (8.9 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARM64

zizmor-1.24.1-py3-none-manylinux_2_28_x86_64.whl (9.3 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ x86-64

zizmor-1.24.1-py3-none-manylinux_2_28_armv7l.whl (8.4 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ ARMv7l

zizmor-1.24.1-py3-none-manylinux_2_24_aarch64.whl (8.8 MB view details)

Uploaded Python 3manylinux: glibc 2.24+ ARM64

zizmor-1.24.1-py3-none-macosx_11_0_arm64.whl (8.7 MB view details)

Uploaded Python 3macOS 11.0+ ARM64

zizmor-1.24.1-py3-none-macosx_10_12_x86_64.whl (9.1 MB view details)

Uploaded Python 3macOS 10.12+ x86-64

File details

Details for the file zizmor-1.24.1.tar.gz.

File metadata

  • Download URL: zizmor-1.24.1.tar.gz
  • Upload date:
  • Size: 501.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.1.tar.gz
Algorithm Hash digest
SHA256 54ebb7a7061ebaa3a373126dcbafe970c9228fe274cfc40776a9714d2095b5e6
MD5 3935e8adcdea32b28b6b7fead47d2b03
BLAKE2b-256 279821be481ab5c08d976e59409828cfcb460a32a737415cf4e9c3f3280acc0b

See more details on using hashes here.

File details

Details for the file zizmor-1.24.1-py3-none-win_amd64.whl.

File metadata

  • Download URL: zizmor-1.24.1-py3-none-win_amd64.whl
  • Upload date:
  • Size: 8.6 MB
  • Tags: Python 3, Windows x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.1-py3-none-win_amd64.whl
Algorithm Hash digest
SHA256 9a0e552bf84f146699a0231dc42cf2cd5cfe140e3f08ff867ac154f62fc1ac2e
MD5 84af47842d4caf883fec7e4c0fd82de7
BLAKE2b-256 ed24710149e5d64d474103165b9eef6f7698827ef2fbb762b034ebc02b11a816

See more details on using hashes here.

File details

Details for the file zizmor-1.24.1-py3-none-win32.whl.

File metadata

  • Download URL: zizmor-1.24.1-py3-none-win32.whl
  • Upload date:
  • Size: 7.5 MB
  • Tags: Python 3, Windows x86
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.1-py3-none-win32.whl
Algorithm Hash digest
SHA256 c87812173fef2a3449d269e50e93b67b2f40826d10464c7add0c0fd7f0523a2c
MD5 a6e862aeb3241d909929521c0b5a61a3
BLAKE2b-256 eeb92c4fe526fc02926206903bfc72dbfbc215f01728eccef8135363d57890c9

See more details on using hashes here.

File details

Details for the file zizmor-1.24.1-py3-none-musllinux_1_2_x86_64.whl.

File metadata

  • Download URL: zizmor-1.24.1-py3-none-musllinux_1_2_x86_64.whl
  • Upload date:
  • Size: 9.4 MB
  • Tags: Python 3, musllinux: musl 1.2+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.1-py3-none-musllinux_1_2_x86_64.whl
Algorithm Hash digest
SHA256 b2d873816137296ca5633ad240a574ce49374009a39d43f78a1675e2dba1ab52
MD5 d0cab5ecccdb0f001b8e0ad0d4dd2633
BLAKE2b-256 a1df9593e8851424738a3b682be8958abf0e6a2c170e0c880d7b3bfb5d9eaf15

See more details on using hashes here.

File details

Details for the file zizmor-1.24.1-py3-none-musllinux_1_2_armv7l.whl.

File metadata

  • Download URL: zizmor-1.24.1-py3-none-musllinux_1_2_armv7l.whl
  • Upload date:
  • Size: 8.4 MB
  • Tags: Python 3, musllinux: musl 1.2+ ARMv7l
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.1-py3-none-musllinux_1_2_armv7l.whl
Algorithm Hash digest
SHA256 ff5acdd10c66ac27396c0fe14e4604933f6c622ffda38a6aa2857b99c75f5108
MD5 d641611db9f6434a9439dc9292632bdc
BLAKE2b-256 8d28c4f220a14cb100ecc965ea0faed1c1229139861a55e792522274221988b3

See more details on using hashes here.

File details

Details for the file zizmor-1.24.1-py3-none-musllinux_1_2_aarch64.whl.

File metadata

  • Download URL: zizmor-1.24.1-py3-none-musllinux_1_2_aarch64.whl
  • Upload date:
  • Size: 8.9 MB
  • Tags: Python 3, musllinux: musl 1.2+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.1-py3-none-musllinux_1_2_aarch64.whl
Algorithm Hash digest
SHA256 d36a2ba3b6d839acd4542f1a8f42bc34ff902cbff302cdf7916cb4e49dc8c5cc
MD5 4ee2d1e80f9b85ecc4d24172d0890c5d
BLAKE2b-256 1462db19dd027b412e92bbea8bd311b733d7726402ee3c734033c714125348f1

See more details on using hashes here.

File details

Details for the file zizmor-1.24.1-py3-none-manylinux_2_28_x86_64.whl.

File metadata

  • Download URL: zizmor-1.24.1-py3-none-manylinux_2_28_x86_64.whl
  • Upload date:
  • Size: 9.3 MB
  • Tags: Python 3, manylinux: glibc 2.28+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.1-py3-none-manylinux_2_28_x86_64.whl
Algorithm Hash digest
SHA256 73083efc7a65e5a58f4439dd781cdcb0394b05a3750e664c7f7e414589dc49b1
MD5 21fee880f9f97f90b16f5c63004c53c7
BLAKE2b-256 7686f8dfffc7a5348c41bc17dea1f1796ac1a56d5e448f26a4193bc65996f571

See more details on using hashes here.

File details

Details for the file zizmor-1.24.1-py3-none-manylinux_2_28_armv7l.whl.

File metadata

  • Download URL: zizmor-1.24.1-py3-none-manylinux_2_28_armv7l.whl
  • Upload date:
  • Size: 8.4 MB
  • Tags: Python 3, manylinux: glibc 2.28+ ARMv7l
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.1-py3-none-manylinux_2_28_armv7l.whl
Algorithm Hash digest
SHA256 61f39674d5ea29640c4b09f3c239b3c9824c646bc790fa3680022e7bb569b375
MD5 0a2d4b1cca807d4ae5953867be996e72
BLAKE2b-256 6567cc411d605fec63b70558d572eb3fc2dbe4e596753e747b74daf5b795c1ed

See more details on using hashes here.

File details

Details for the file zizmor-1.24.1-py3-none-manylinux_2_24_aarch64.whl.

File metadata

  • Download URL: zizmor-1.24.1-py3-none-manylinux_2_24_aarch64.whl
  • Upload date:
  • Size: 8.8 MB
  • Tags: Python 3, manylinux: glibc 2.24+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.1-py3-none-manylinux_2_24_aarch64.whl
Algorithm Hash digest
SHA256 9b0689c55854edb0f3e6430321a93ca0081d8e34028cdcb47b9504f8a8559c27
MD5 c7fac0bd9691f12d39832dd24d66cb3b
BLAKE2b-256 d2641dfa166dea03ddff23ee3d6c6ebce8322766f7188e008aa0d3612af3e709

See more details on using hashes here.

File details

Details for the file zizmor-1.24.1-py3-none-macosx_11_0_arm64.whl.

File metadata

  • Download URL: zizmor-1.24.1-py3-none-macosx_11_0_arm64.whl
  • Upload date:
  • Size: 8.7 MB
  • Tags: Python 3, macOS 11.0+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.1-py3-none-macosx_11_0_arm64.whl
Algorithm Hash digest
SHA256 f44379019188b1a18d560614ab8abac7ce10553ad2ab57d519fa1c214881ff95
MD5 561d390ea164b46a5bd017352662b4da
BLAKE2b-256 5cccf87ff2ccb9c57f4a1e5e9bd0351f9c84dc724fbd61b8ef70bc7e8abc1e0e

See more details on using hashes here.

File details

Details for the file zizmor-1.24.1-py3-none-macosx_10_12_x86_64.whl.

File metadata

  • Download URL: zizmor-1.24.1-py3-none-macosx_10_12_x86_64.whl
  • Upload date:
  • Size: 9.1 MB
  • Tags: Python 3, macOS 10.12+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.6 {"installer":{"name":"uv","version":"0.11.6","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.24.1-py3-none-macosx_10_12_x86_64.whl
Algorithm Hash digest
SHA256 fd7c4953aa438aae599db69ed70ac687995e9e3314208bf1be5336479d556c8e
MD5 1492b315f8d88c481864bff22ee163e1
BLAKE2b-256 6a0dc932a14dfe7d3fed5dbf26a7bf1b7b9dbf277cef1d0b76fbcddae386442d

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page