Static analysis for GitHub Actions

Navigation

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for woodruffw from gravatar.com woodruffw
Meta

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: MIT
  • Author: William Woodruff <william@yossarian.net>
  • Requires: Python >=3.10
Report project as malware

Project description

🌈 zizmor

zizmor CI Crates.io Packaging status GitHub Sponsors Discord

zizmor is a static analysis tool for GitHub Actions.

It can find many common security issues in typical GitHub Actions CI/CD setups, including:

  • Template injection vulnerabilities, leading to attacker-controlled code execution
  • Accidental credential persistence and leakage
  • Excessive permission scopes and credential grants to runners
  • Impostor commits and confusable git references
  • ...and much more!

zizmor demo

See zizmor's documentation for installation steps, as well as a quickstart and detailed usage recipes.

License

zizmor is licensed under the MIT License.

Contributing

See our contributing guide!

The name?

Now you can have beautiful clean workflows!

Sponsors

zizmor's development is supported by these amazing sponsors!

Logo-level sponsors

Grafana Labs
Trail of Bits
Shipfox
Kusari
Tracebit
Name-level sponsors
Alexander Riccio

Want to see your name or logo above? Consider becoming a sponsor through one of the following:

Star History

Star History Chart

Project details

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for woodruffw from gravatar.com woodruffw
Meta

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: MIT
  • Author: William Woodruff <william@yossarian.net>
  • Requires: Python >=3.10

Release history Release notifications | RSS feed

1.25.2

This version

1.25.1

1.25.0

1.24.1

1.24.0

1.24.0rc3 pre-release

1.24.0rc2 pre-release

1.23.1

1.23.0

1.23.0rc7 pre-release

1.23.0rc6 pre-release

1.23.0rc5 pre-release

1.23.0rc1 pre-release

1.22.0

1.21.0

1.20.0

1.19.0

1.18.0

1.18.0rc3 pre-release

1.18.0rc2 pre-release

1.17.0

1.16.3

1.16.2

1.16.1

1.16.0

1.15.2

1.15.1

1.15.0

1.14.2

1.14.1

1.14.0

1.13.0

1.12.1

1.12.0

1.11.1rc1 pre-release

1.11.0

1.10.0

1.9.0

1.8.0

1.8.0rc2 pre-release

1.8.0rc1 pre-release

1.7.0

1.6.0

1.5.2

1.5.1

1.5.0

1.4.1

1.4.0

1.3.1

1.3.0

1.2.2

1.2.1

1.2.0

1.1.1

1.1.0

1.0.1

1.0.0

0.10.0

0.9.2

0.9.1

0.9.0

0.8.0

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

zizmor-1.25.1.tar.gz (517.7 kB view details)

Uploaded Source

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

zizmor-1.25.1-py3-none-win_amd64.whl (8.6 MB view details)

Uploaded Python 3Windows x86-64

zizmor-1.25.1-py3-none-win32.whl (7.5 MB view details)

Uploaded Python 3Windows x86

zizmor-1.25.1-py3-none-musllinux_1_2_x86_64.whl (9.4 MB view details)

Uploaded Python 3musllinux: musl 1.2+ x86-64

zizmor-1.25.1-py3-none-musllinux_1_2_armv7l.whl (8.4 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARMv7l

zizmor-1.25.1-py3-none-musllinux_1_2_aarch64.whl (8.9 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARM64

zizmor-1.25.1-py3-none-manylinux_2_28_x86_64.whl (9.3 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ x86-64

zizmor-1.25.1-py3-none-manylinux_2_28_armv7l.whl (8.5 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ ARMv7l

zizmor-1.25.1-py3-none-manylinux_2_24_aarch64.whl (8.8 MB view details)

Uploaded Python 3manylinux: glibc 2.24+ ARM64

zizmor-1.25.1-py3-none-macosx_11_0_arm64.whl (8.7 MB view details)

Uploaded Python 3macOS 11.0+ ARM64

zizmor-1.25.1-py3-none-macosx_10_12_x86_64.whl (9.2 MB view details)

Uploaded Python 3macOS 10.12+ x86-64

File details

Details for the file zizmor-1.25.1.tar.gz.

File metadata

  • Download URL: zizmor-1.25.1.tar.gz
  • Upload date:
  • Size: 517.7 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.1.tar.gz
Algorithm Hash digest
SHA256 f7849ce53371178338bd0302c7ee16fd274354e1f46490b49a76da37a1a1e7a1
MD5 cc25e8cf2760e43953fe14b686bf2451
BLAKE2b-256 28166fb78c89586bfbd6e2aec21999891e3281ed104d29b65654b0112b6f804f

See more details on using hashes here.

File details

Details for the file zizmor-1.25.1-py3-none-win_amd64.whl.

File metadata

  • Download URL: zizmor-1.25.1-py3-none-win_amd64.whl
  • Upload date:
  • Size: 8.6 MB
  • Tags: Python 3, Windows x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.1-py3-none-win_amd64.whl
Algorithm Hash digest
SHA256 d3113404fe529751b983f0282373e1c66c755f114ef5078aa6e59cf5f9c3fea9
MD5 6001ffdbafdfdf845a15d221d5f3601a
BLAKE2b-256 906150ceb009e10d9a6dfff176b1c14cf5178c53b50820113b170b43f405a3f1

See more details on using hashes here.

File details

Details for the file zizmor-1.25.1-py3-none-win32.whl.

File metadata

  • Download URL: zizmor-1.25.1-py3-none-win32.whl
  • Upload date:
  • Size: 7.5 MB
  • Tags: Python 3, Windows x86
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.1-py3-none-win32.whl
Algorithm Hash digest
SHA256 6ebb21f7c1f3a6288b70dae899a3850cf4705443a7a0d8a3976508536a867f48
MD5 10e1b71358c6feb5e2fa732e31c10202
BLAKE2b-256 13f079c5f3d13a07a85f8fc77be7dfc619e89dbc721ccb9482d894d14d7dff50

See more details on using hashes here.

File details

Details for the file zizmor-1.25.1-py3-none-musllinux_1_2_x86_64.whl.

File metadata

  • Download URL: zizmor-1.25.1-py3-none-musllinux_1_2_x86_64.whl
  • Upload date:
  • Size: 9.4 MB
  • Tags: Python 3, musllinux: musl 1.2+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.1-py3-none-musllinux_1_2_x86_64.whl
Algorithm Hash digest
SHA256 5b727f9dd5bee4138638bcc3a90471326b33dd8aa7cfdd48e9da1513030b75e5
MD5 eaf9bf2f7cbaf6fab9627f9039f3009f
BLAKE2b-256 1093857a412ac097a9a887d01994ba7154daf9c9ef160b9ee22a8305914901cb

See more details on using hashes here.

File details

Details for the file zizmor-1.25.1-py3-none-musllinux_1_2_armv7l.whl.

File metadata

  • Download URL: zizmor-1.25.1-py3-none-musllinux_1_2_armv7l.whl
  • Upload date:
  • Size: 8.4 MB
  • Tags: Python 3, musllinux: musl 1.2+ ARMv7l
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.1-py3-none-musllinux_1_2_armv7l.whl
Algorithm Hash digest
SHA256 025ff2ae568513af2ca8e5f8da7077920ade7f4454086b0ba32ccfe1b3e9d3c0
MD5 4ffa73f9b067296b596df126c3c8caff
BLAKE2b-256 65f3e9703dcc60fbc91849cbdedff438a8c47fb962e429811d0200ac370f5e13

See more details on using hashes here.

File details

Details for the file zizmor-1.25.1-py3-none-musllinux_1_2_aarch64.whl.

File metadata

  • Download URL: zizmor-1.25.1-py3-none-musllinux_1_2_aarch64.whl
  • Upload date:
  • Size: 8.9 MB
  • Tags: Python 3, musllinux: musl 1.2+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.1-py3-none-musllinux_1_2_aarch64.whl
Algorithm Hash digest
SHA256 4db178b1d6671abb78aca64295c7b3081375c3ab9303e966e91cfae20b1604e2
MD5 6e4aca1e5f397d67a29e1ed61cbdaf84
BLAKE2b-256 dbad0d41eb3dd09625f824545590e02b3e5be4fef2fba716b5466a7269dac8bd

See more details on using hashes here.

File details

Details for the file zizmor-1.25.1-py3-none-manylinux_2_28_x86_64.whl.

File metadata

  • Download URL: zizmor-1.25.1-py3-none-manylinux_2_28_x86_64.whl
  • Upload date:
  • Size: 9.3 MB
  • Tags: Python 3, manylinux: glibc 2.28+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.1-py3-none-manylinux_2_28_x86_64.whl
Algorithm Hash digest
SHA256 917c86ff8f91706e6d6f2e24a3472f64e75397e2dd50c19fda5b117ab1b9f26d
MD5 ed6d632d35637f15207cffd786624acb
BLAKE2b-256 be5ba5dd5cb75d4b0cb148d0d395abfd6e9b335244f22372367b5d82fb6d5d60

See more details on using hashes here.

File details

Details for the file zizmor-1.25.1-py3-none-manylinux_2_28_armv7l.whl.

File metadata

  • Download URL: zizmor-1.25.1-py3-none-manylinux_2_28_armv7l.whl
  • Upload date:
  • Size: 8.5 MB
  • Tags: Python 3, manylinux: glibc 2.28+ ARMv7l
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.1-py3-none-manylinux_2_28_armv7l.whl
Algorithm Hash digest
SHA256 e25e9167d549df0a21a857165b7c57e3d60fd2984f934fa07d1f5e06c9a59f4a
MD5 84878dd07d90bcafaf80acf4c5dbfd6d
BLAKE2b-256 2006b5588059bd05d4e61203e3d3dfb34fc5c0930d4b5446c79154cfe0c71c60

See more details on using hashes here.

File details

Details for the file zizmor-1.25.1-py3-none-manylinux_2_24_aarch64.whl.

File metadata

  • Download URL: zizmor-1.25.1-py3-none-manylinux_2_24_aarch64.whl
  • Upload date:
  • Size: 8.8 MB
  • Tags: Python 3, manylinux: glibc 2.24+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.1-py3-none-manylinux_2_24_aarch64.whl
Algorithm Hash digest
SHA256 3eabb625b4e9814754c77f6a79092cd57ce05a1693ef0f2a16362b841c7268db
MD5 85e463b3b27ddae2c18d69af601f8635
BLAKE2b-256 d405c6e16b705452a80aae1d532a64f05b2f672665eb04f9f155d14a81fa62cc

See more details on using hashes here.

File details

Details for the file zizmor-1.25.1-py3-none-macosx_11_0_arm64.whl.

File metadata

  • Download URL: zizmor-1.25.1-py3-none-macosx_11_0_arm64.whl
  • Upload date:
  • Size: 8.7 MB
  • Tags: Python 3, macOS 11.0+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.1-py3-none-macosx_11_0_arm64.whl
Algorithm Hash digest
SHA256 172ff167f4d3616c7af972a5ddcd9e26b6fe4bf39d33bcfbb424da54f667e80b
MD5 12376b6b75224c9edd45432825372523
BLAKE2b-256 78d2281b579c8cbb5d9f52f70a53db67bf9162ce1f260312d783b415d99b78c6

See more details on using hashes here.

File details

Details for the file zizmor-1.25.1-py3-none-macosx_10_12_x86_64.whl.

File metadata

  • Download URL: zizmor-1.25.1-py3-none-macosx_10_12_x86_64.whl
  • Upload date:
  • Size: 9.2 MB
  • Tags: Python 3, macOS 10.12+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.11.14 {"installer":{"name":"uv","version":"0.11.14","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.25.1-py3-none-macosx_10_12_x86_64.whl
Algorithm Hash digest
SHA256 afb2e483beb7245d9216ed62ccaf7bef4b59387126521f2b5a47677eda3fade1
MD5 eb5bde428975fed25d777791dca2632d
BLAKE2b-256 64e4a8971c6a350150485309ead9a09dc38268057d0b07a423f75bc30ef5ac5c

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page