Static analysis for GitHub Actions

Navigation

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for woodruffw from gravatar.com woodruffw
Meta

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: MIT
  • Author: William Woodruff <william@yossarian.net>
  • Requires: Python >=3.10
Report project as malware

Project description

🌈 zizmor

zizmor CI Crates.io Packaging status GitHub Sponsors Discord

zizmor is a static analysis tool for GitHub Actions.

It can find many common security issues in typical GitHub Actions CI/CD setups, including:

  • Template injection vulnerabilities, leading to attacker-controlled code execution
  • Accidental credential persistence and leakage
  • Excessive permission scopes and credential grants to runners
  • Impostor commits and confusable git references
  • ...and much more!

zizmor demo

See zizmor's documentation for installation steps, as well as a quickstart and detailed usage recipes.

License

zizmor is licensed under the MIT License.

Contributing

See our contributing guide!

The name?

Now you can have beautiful clean workflows!

Sponsors

zizmor's development is supported by these amazing sponsors!

Logo-level sponsors

Grafana Labs
Trail of Bits
Shipfox
Kusari
Tracebit
Name-level sponsors
Alexander Riccio

Want to see your name or logo above? Consider becoming a sponsor through one of the following:

Star History

Star History Chart

Project details

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for woodruffw from gravatar.com woodruffw
Meta

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: MIT
  • Author: William Woodruff <william@yossarian.net>
  • Requires: Python >=3.10

Release history Release notifications | RSS feed

1.25.2

1.25.1

This version

1.25.0

1.24.1

1.24.0

1.24.0rc3 pre-release

1.24.0rc2 pre-release

1.23.1

1.23.0

1.23.0rc7 pre-release

1.23.0rc6 pre-release

1.23.0rc5 pre-release

1.23.0rc1 pre-release

1.22.0

1.21.0

1.20.0

1.19.0

1.18.0

1.18.0rc3 pre-release

1.18.0rc2 pre-release

1.17.0

1.16.3

1.16.2

1.16.1

1.16.0

1.15.2

1.15.1

1.15.0

1.14.2

1.14.1

1.14.0

1.13.0

1.12.1

1.12.0

1.11.1rc1 pre-release

1.11.0

1.10.0

1.9.0

1.8.0

1.8.0rc2 pre-release

1.8.0rc1 pre-release

1.7.0

1.6.0

1.5.2

1.5.1

1.5.0

1.4.1

1.4.0

1.3.1

1.3.0

1.2.2

1.2.1

1.2.0

1.1.1

1.1.0

1.0.1

1.0.0

0.10.0

0.9.2

0.9.1

0.9.0

0.8.0

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

zizmor-1.25.0.tar.gz (517.6 kB view details)

Uploaded Source

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

zizmor-1.25.0-py3-none-win_amd64.whl (8.6 MB view details)

Uploaded Python 3Windows x86-64

zizmor-1.25.0-py3-none-win32.whl (7.5 MB view details)

Uploaded Python 3Windows x86

zizmor-1.25.0-py3-none-musllinux_1_2_x86_64.whl (9.4 MB view details)

Uploaded Python 3musllinux: musl 1.2+ x86-64

zizmor-1.25.0-py3-none-musllinux_1_2_armv7l.whl (8.4 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARMv7l

zizmor-1.25.0-py3-none-musllinux_1_2_aarch64.whl (8.9 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARM64

zizmor-1.25.0-py3-none-manylinux_2_28_x86_64.whl (9.3 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ x86-64

zizmor-1.25.0-py3-none-manylinux_2_28_armv7l.whl (8.5 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ ARMv7l

zizmor-1.25.0-py3-none-manylinux_2_24_aarch64.whl (8.8 MB view details)

Uploaded Python 3manylinux: glibc 2.24+ ARM64

zizmor-1.25.0-py3-none-macosx_11_0_arm64.whl (8.7 MB view details)

Uploaded Python 3macOS 11.0+ ARM64

zizmor-1.25.0-py3-none-macosx_10_12_x86_64.whl (9.1 MB view details)

Uploaded Python 3macOS 10.12+ x86-64

File details

Details for the file zizmor-1.25.0.tar.gz.

File metadata

  • Download URL: zizmor-1.25.0.tar.gz
  • Upload date:
  • Size: 517.6 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.0.tar.gz
Algorithm Hash digest
SHA256 a49bf420679fd35143814a35ac0e21826afee3ac322728409fac3955ae2d8f60
MD5 35e4e0906d7f62c2d497e42476dc5718
BLAKE2b-256 63e3827a6d882397a9eb006b65755839bfa0a44286017afe11d4fb92d949bfb9

See more details on using hashes here.

File details

Details for the file zizmor-1.25.0-py3-none-win_amd64.whl.

File metadata

  • Download URL: zizmor-1.25.0-py3-none-win_amd64.whl
  • Upload date:
  • Size: 8.6 MB
  • Tags: Python 3, Windows x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.0-py3-none-win_amd64.whl
Algorithm Hash digest
SHA256 43a7b91c8359856bda7cffa9eb6aa4d362e0bf51136c6e494ca4d621ad8b411b
MD5 a806bc12a88a8fe5b9d6dac36e800797
BLAKE2b-256 72979295f8a878049f30d4bc226fa8a063a5bc5d498535993178a4e8e76b4edd

See more details on using hashes here.

File details

Details for the file zizmor-1.25.0-py3-none-win32.whl.

File metadata

  • Download URL: zizmor-1.25.0-py3-none-win32.whl
  • Upload date:
  • Size: 7.5 MB
  • Tags: Python 3, Windows x86
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.0-py3-none-win32.whl
Algorithm Hash digest
SHA256 c0526defd163cb60c24c959fb4e84027b122f6801f4b0565f93af894ab72d453
MD5 0c96627780e8413488ac48724dfc14a3
BLAKE2b-256 749cc815bea8a6111c7b659b39d9b95d668969d2bda5eb6db61c2dcde0be363c

See more details on using hashes here.

File details

Details for the file zizmor-1.25.0-py3-none-musllinux_1_2_x86_64.whl.

File metadata

  • Download URL: zizmor-1.25.0-py3-none-musllinux_1_2_x86_64.whl
  • Upload date:
  • Size: 9.4 MB
  • Tags: Python 3, musllinux: musl 1.2+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.0-py3-none-musllinux_1_2_x86_64.whl
Algorithm Hash digest
SHA256 8bb513eba8b66cb292c5c8267e1974e662ca23ee39e26b4a3f10d653e7910769
MD5 0f21b2fd2a0459fc20cbba1fceed4b99
BLAKE2b-256 743addb841376635a89c0655c47b025ee679f0ac8841a3ba6add119874c06f18

See more details on using hashes here.

File details

Details for the file zizmor-1.25.0-py3-none-musllinux_1_2_armv7l.whl.

File metadata

  • Download URL: zizmor-1.25.0-py3-none-musllinux_1_2_armv7l.whl
  • Upload date:
  • Size: 8.4 MB
  • Tags: Python 3, musllinux: musl 1.2+ ARMv7l
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.0-py3-none-musllinux_1_2_armv7l.whl
Algorithm Hash digest
SHA256 045d542be3005f797e0bcf50c56e6f313fdd5d56e3b105034153bf7eaec52535
MD5 9bcabe061d59a411dc803d4a5c51f9c0
BLAKE2b-256 cd5b3be1deaf41263cb1e0a5b716aae7ed4e9873eca2bd45901ced62c9de83e6

See more details on using hashes here.

File details

Details for the file zizmor-1.25.0-py3-none-musllinux_1_2_aarch64.whl.

File metadata

  • Download URL: zizmor-1.25.0-py3-none-musllinux_1_2_aarch64.whl
  • Upload date:
  • Size: 8.9 MB
  • Tags: Python 3, musllinux: musl 1.2+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.0-py3-none-musllinux_1_2_aarch64.whl
Algorithm Hash digest
SHA256 6a56c67adfcb2384027e193cbb7d7f9511f22c8b6898bbd7adbef87f0e39c811
MD5 2d993b8c3f5d36f37ce7cb9ef96c4732
BLAKE2b-256 f59c6f8a01f8a2baa1cc591a6d5fe6b98efa747f108bb7d60e9e77e7d5af2956

See more details on using hashes here.

File details

Details for the file zizmor-1.25.0-py3-none-manylinux_2_28_x86_64.whl.

File metadata

  • Download URL: zizmor-1.25.0-py3-none-manylinux_2_28_x86_64.whl
  • Upload date:
  • Size: 9.3 MB
  • Tags: Python 3, manylinux: glibc 2.28+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.0-py3-none-manylinux_2_28_x86_64.whl
Algorithm Hash digest
SHA256 9f91e9f106e2688f17c607a822983b760b9781522edb5a38a89908c117042286
MD5 f89bd318bec8740e504f085e8e0cf63a
BLAKE2b-256 c518d04d6abdb7e39a89bce6fb22a683a562b65b2c0a0649839cbed0affcd427

See more details on using hashes here.

File details

Details for the file zizmor-1.25.0-py3-none-manylinux_2_28_armv7l.whl.

File metadata

  • Download URL: zizmor-1.25.0-py3-none-manylinux_2_28_armv7l.whl
  • Upload date:
  • Size: 8.5 MB
  • Tags: Python 3, manylinux: glibc 2.28+ ARMv7l
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.0-py3-none-manylinux_2_28_armv7l.whl
Algorithm Hash digest
SHA256 6679e13a53a6ae183530980d47fe1f5550743d28d3a81f6ea694f1ce472d4545
MD5 fb41d0596d32e78ccf7bf0bfbe319d90
BLAKE2b-256 6dbf1cef30cccbd94687ecc01494220439c12ab79266f95387aa92adb625a12e

See more details on using hashes here.

File details

Details for the file zizmor-1.25.0-py3-none-manylinux_2_24_aarch64.whl.

File metadata

  • Download URL: zizmor-1.25.0-py3-none-manylinux_2_24_aarch64.whl
  • Upload date:
  • Size: 8.8 MB
  • Tags: Python 3, manylinux: glibc 2.24+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.0-py3-none-manylinux_2_24_aarch64.whl
Algorithm Hash digest
SHA256 427d63982dd06e7daf3aaeb4780070d82b395825506e7dd35ba0c73e9b5a0558
MD5 f568d7eaa6149ec1d6d5893a358affbb
BLAKE2b-256 7c3125a9d19957663fd6278bd75ea086e8b51c6b5dfa378ea9e23274605b6a0d

See more details on using hashes here.

File details

Details for the file zizmor-1.25.0-py3-none-macosx_11_0_arm64.whl.

File metadata

  • Download URL: zizmor-1.25.0-py3-none-macosx_11_0_arm64.whl
  • Upload date:
  • Size: 8.7 MB
  • Tags: Python 3, macOS 11.0+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.0-py3-none-macosx_11_0_arm64.whl
Algorithm Hash digest
SHA256 fc2b8765156e8e1bea2f9e0937a1e3b1f60a7998a120cbe870b83d0c8e4626de
MD5 1c97effd9f7474d80dfe0c91d6108fad
BLAKE2b-256 833ec48d5d824ccf2007426987f5648a0ef187556c31868b2d47af12f056b2af

See more details on using hashes here.

File details

Details for the file zizmor-1.25.0-py3-none-macosx_10_12_x86_64.whl.

File metadata

  • Download URL: zizmor-1.25.0-py3-none-macosx_10_12_x86_64.whl
  • Upload date:
  • Size: 9.1 MB
  • Tags: Python 3, macOS 10.12+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.0-py3-none-macosx_10_12_x86_64.whl
Algorithm Hash digest
SHA256 e388a0a02f323eac9de1b7af56d525665574d7b07952d828fc63b148a988d9db
MD5 873c82582ccefca290584617098a7876
BLAKE2b-256 644119e67e4b21c36b943e4123164f641ac1dddbda38f918758a8fd157d705a5

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page