🌈 zizmor

zizmor is a static analysis tool for GitHub Actions.

It can find many common security issues in typical GitHub Actions CI/CD setups, including:

Template injection vulnerabilities, leading to attacker-controlled code execution
Accidental credential persistence and leakage
Excessive permission scopes and credential grants to runners
Impostor commits and confusable git references
...and much more!

zizmor demo

See zizmor's documentation for installation steps, as well as a quickstart and detailed usage recipes.

License

zizmor is licensed under the MIT License.

Contributing

See our contributing guide!

The name?

Now you can have beautiful clean workflows!

Logo-level sponsors
Grafana Labs	Trail of Bits	Kusari	Tracebit

Name-level sponsors
Alexander Riccio	Carol Willing

Star History

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

zizmor-1.28.0.tar.gz (550.2 kB view details)

Uploaded Jul 21, 2026 Source

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

zizmor-1.28.0-py3-none-win_amd64.whl (8.6 MB view details)

Uploaded Jul 21, 2026 Python 3Windows x86-64

zizmor-1.28.0-py3-none-win32.whl (7.5 MB view details)

Uploaded Jul 21, 2026 Python 3Windows x86

zizmor-1.28.0-py3-none-musllinux_1_2_x86_64.whl (9.3 MB view details)

Uploaded Jul 21, 2026 Python 3musllinux: musl 1.2+ x86-64

zizmor-1.28.0-py3-none-musllinux_1_2_armv7l.whl (8.3 MB view details)

Uploaded Jul 21, 2026 Python 3musllinux: musl 1.2+ ARMv7l

zizmor-1.28.0-py3-none-musllinux_1_2_aarch64.whl (8.8 MB view details)

Uploaded Jul 21, 2026 Python 3musllinux: musl 1.2+ ARM64

zizmor-1.28.0-py3-none-manylinux_2_28_x86_64.whl (9.2 MB view details)

Uploaded Jul 21, 2026 Python 3manylinux: glibc 2.28+ x86-64

zizmor-1.28.0-py3-none-manylinux_2_28_armv7l.whl (8.4 MB view details)

Uploaded Jul 21, 2026 Python 3manylinux: glibc 2.28+ ARMv7l

zizmor-1.28.0-py3-none-manylinux_2_24_aarch64.whl (8.8 MB view details)

Uploaded Jul 21, 2026 Python 3manylinux: glibc 2.24+ ARM64

zizmor-1.28.0-py3-none-macosx_11_0_arm64.whl (8.5 MB view details)

Uploaded Jul 21, 2026 Python 3macOS 11.0+ ARM64

zizmor-1.28.0-py3-none-macosx_10_12_x86_64.whl (8.9 MB view details)

Uploaded Jul 21, 2026 Python 3macOS 10.12+ x86-64

File details

Details for the file zizmor-1.28.0.tar.gz.

File metadata

Download URL: zizmor-1.28.0.tar.gz
Upload date: Jul 21, 2026
Size: 550.2 kB
Tags: Source
Uploaded using Trusted Publishing? Yes
Uploaded via: uv/0.11.30 {"installer":{"name":"uv","version":"0.11.30","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.28.0.tar.gz
Algorithm	Hash digest
SHA256	`6d5a300b80bf4c12e9cbe78ffd3874ec3f94b65bea78c994ec18157e2846ece0`
MD5	`d1485cc05bce3dd763923165a40f482f`
BLAKE2b-256	`64926b58872ac1184a441037bdc05c658a3900f49401b25f6e834a268ef6ff52`

See more details on using hashes here.

File details

Details for the file zizmor-1.28.0-py3-none-win_amd64.whl.

File metadata

Download URL: zizmor-1.28.0-py3-none-win_amd64.whl
Upload date: Jul 21, 2026
Size: 8.6 MB
Tags: Python 3, Windows x86-64
Uploaded using Trusted Publishing? Yes
Uploaded via: uv/0.11.30 {"installer":{"name":"uv","version":"0.11.30","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.28.0-py3-none-win_amd64.whl
Algorithm	Hash digest
SHA256	`c93b30d211b0b0c38905a8803cc2653fff37de03eb77105302a02f709773bd4a`
MD5	`eabd4afd7321aec1cb0eba0d17987a09`
BLAKE2b-256	`b1f53f4591746e5a9c7e8efc2e9e02aa43e1aa0957fe33cae64ce386c74b882e`

See more details on using hashes here.

File details

Details for the file zizmor-1.28.0-py3-none-win32.whl.

File metadata

Download URL: zizmor-1.28.0-py3-none-win32.whl
Upload date: Jul 21, 2026
Size: 7.5 MB
Tags: Python 3, Windows x86
Uploaded using Trusted Publishing? Yes
Uploaded via: uv/0.11.30 {"installer":{"name":"uv","version":"0.11.30","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.28.0-py3-none-win32.whl
Algorithm	Hash digest
SHA256	`833c360ba5a9c74ca45007b8c79939826fca0c5ed65144fa08f63a7009cef096`
MD5	`0a2dcfa3b1d146864649b822bbd49077`
BLAKE2b-256	`a2965d841d197c821921cb8243352c610ca2505a86871c10f81efe4da190d24c`

See more details on using hashes here.

File details

Details for the file zizmor-1.28.0-py3-none-musllinux_1_2_x86_64.whl.

File metadata

Download URL: zizmor-1.28.0-py3-none-musllinux_1_2_x86_64.whl
Upload date: Jul 21, 2026
Size: 9.3 MB
Tags: Python 3, musllinux: musl 1.2+ x86-64
Uploaded using Trusted Publishing? Yes
Uploaded via: uv/0.11.30 {"installer":{"name":"uv","version":"0.11.30","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.28.0-py3-none-musllinux_1_2_x86_64.whl
Algorithm	Hash digest
SHA256	`ef69d198dcf6835c9b6eea8673cbc5c36f10b3f1b98b51d28266b7e01c3704d4`
MD5	`5219c2e62ee2db9ee924f4ebb1098647`
BLAKE2b-256	`97e24521e6dd56bc0d44eefb177794e261925c5cd00ab647b17e5513bddcb985`

See more details on using hashes here.

File details

Details for the file zizmor-1.28.0-py3-none-musllinux_1_2_armv7l.whl.

File metadata

Download URL: zizmor-1.28.0-py3-none-musllinux_1_2_armv7l.whl
Upload date: Jul 21, 2026
Size: 8.3 MB
Tags: Python 3, musllinux: musl 1.2+ ARMv7l
Uploaded using Trusted Publishing? Yes
Uploaded via: uv/0.11.30 {"installer":{"name":"uv","version":"0.11.30","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.28.0-py3-none-musllinux_1_2_armv7l.whl
Algorithm	Hash digest
SHA256	`6897f02b0d02fd709f5ebc13cd37d97ad464219e0ba86a03f6d86f7777b7b102`
MD5	`b6e2a336e42ac8583747a13ffd170537`
BLAKE2b-256	`1a3d4d5583f24730f404c104eacf8aca4ca5a3d4c480e9d3cfe3eadd93351fd6`

See more details on using hashes here.

File details

Details for the file zizmor-1.28.0-py3-none-musllinux_1_2_aarch64.whl.

File metadata

Download URL: zizmor-1.28.0-py3-none-musllinux_1_2_aarch64.whl
Upload date: Jul 21, 2026
Size: 8.8 MB
Tags: Python 3, musllinux: musl 1.2+ ARM64
Uploaded using Trusted Publishing? Yes
Uploaded via: uv/0.11.30 {"installer":{"name":"uv","version":"0.11.30","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.28.0-py3-none-musllinux_1_2_aarch64.whl
Algorithm	Hash digest
SHA256	`7b00018cf2cc948c3b3e010c1a1f30fdc001f0d062640469f17e0ef006e74eb7`
MD5	`e78410db2d746aa84095e93bb3d402da`
BLAKE2b-256	`f375adad17b0320eb3bc9ed797019fccf69a809affdf5ba9402bdc8b910957e1`

See more details on using hashes here.

File details

Details for the file zizmor-1.28.0-py3-none-manylinux_2_28_x86_64.whl.

File metadata

Download URL: zizmor-1.28.0-py3-none-manylinux_2_28_x86_64.whl
Upload date: Jul 21, 2026
Size: 9.2 MB
Tags: Python 3, manylinux: glibc 2.28+ x86-64
Uploaded using Trusted Publishing? Yes
Uploaded via: uv/0.11.30 {"installer":{"name":"uv","version":"0.11.30","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.28.0-py3-none-manylinux_2_28_x86_64.whl
Algorithm	Hash digest
SHA256	`ae2cab67ce713e760e0d1b61ad749d374693ea2b310337aab11cd446748267f3`
MD5	`05c406406274e7bfe0b05f6b98d6701b`
BLAKE2b-256	`5bb4f823bd2a1ba6dc432fdcbd249d4c442ce79bd137d34d986fce5c181f2800`

See more details on using hashes here.

File details

Details for the file zizmor-1.28.0-py3-none-manylinux_2_28_armv7l.whl.

File metadata

Download URL: zizmor-1.28.0-py3-none-manylinux_2_28_armv7l.whl
Upload date: Jul 21, 2026
Size: 8.4 MB
Tags: Python 3, manylinux: glibc 2.28+ ARMv7l
Uploaded using Trusted Publishing? Yes
Uploaded via: uv/0.11.30 {"installer":{"name":"uv","version":"0.11.30","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.28.0-py3-none-manylinux_2_28_armv7l.whl
Algorithm	Hash digest
SHA256	`354e6cb98a15a88593a6f7ac6236b092b83a2aad5c4768ee750f9b3262f668d9`
MD5	`b64233f71e2379fa9610981b9bb757e2`
BLAKE2b-256	`6933b65717a3ca4573611f47612e67be5458ff700e857f49f759741fa67b0519`

See more details on using hashes here.

File details

Details for the file zizmor-1.28.0-py3-none-manylinux_2_24_aarch64.whl.

File metadata

Download URL: zizmor-1.28.0-py3-none-manylinux_2_24_aarch64.whl
Upload date: Jul 21, 2026
Size: 8.8 MB
Tags: Python 3, manylinux: glibc 2.24+ ARM64
Uploaded using Trusted Publishing? Yes
Uploaded via: uv/0.11.30 {"installer":{"name":"uv","version":"0.11.30","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.28.0-py3-none-manylinux_2_24_aarch64.whl
Algorithm	Hash digest
SHA256	`9819f91f0ef486e4af98a6aacfed23c6b4067fabcecb88d49231228a3d43f821`
MD5	`89a798cad38668424bcf847b39f99840`
BLAKE2b-256	`4f0769aba8157056fc0949cbdc787d8437813961e204a117c629d34afc827d6d`

See more details on using hashes here.

File details

Details for the file zizmor-1.28.0-py3-none-macosx_11_0_arm64.whl.

File metadata

Download URL: zizmor-1.28.0-py3-none-macosx_11_0_arm64.whl
Upload date: Jul 21, 2026
Size: 8.5 MB
Tags: Python 3, macOS 11.0+ ARM64
Uploaded using Trusted Publishing? Yes
Uploaded via: uv/0.11.30 {"installer":{"name":"uv","version":"0.11.30","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.28.0-py3-none-macosx_11_0_arm64.whl
Algorithm	Hash digest
SHA256	`0949f57a6d20deeb9c509705afce8de233c166475e25be305985a1fe553c6e0d`
MD5	`4ee6bf156d38248c920dce6c90c2edef`
BLAKE2b-256	`2092ba6d0eb2b336b4c4826bb0c9ed23c3239d46d71d8c1ddd2d395efeff7f52`

See more details on using hashes here.

File details

Details for the file zizmor-1.28.0-py3-none-macosx_10_12_x86_64.whl.

File metadata

Download URL: zizmor-1.28.0-py3-none-macosx_10_12_x86_64.whl
Upload date: Jul 21, 2026
Size: 8.9 MB
Tags: Python 3, macOS 10.12+ x86-64
Uploaded using Trusted Publishing? Yes
Uploaded via: uv/0.11.30 {"installer":{"name":"uv","version":"0.11.30","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.28.0-py3-none-macosx_10_12_x86_64.whl
Algorithm	Hash digest
SHA256	`149dba59a8bd2897960ee54c40ae8b5801a71293bad71c8d2913c74ab66a294c`
MD5	`57431b3cd4a0007eb52e010e755e4433`
BLAKE2b-256	`e848a725a1c34e5565eeeb4e4a93c59662f206e5156f2029627c66b2373edf55`

See more details on using hashes here.

Release history Release notifications | RSS feed

1.30.0rc1 pre-release

Aug 13, 2026

1.29.0

Aug 1, 2026

This release

1.28.0

Jul 21, 2026

1.27.0 yanked

Jul 14, 2026

Reason this release was yanked:

GHSA-f42p-wjw5-97qh

1.26.1

Jun 21, 2026

1.26.0

Jun 21, 2026

1.25.2

May 16, 2026

1.25.1

May 15, 2026

1.25.0

May 14, 2026

1.24.1

Apr 13, 2026

1.24.0

Apr 13, 2026

1.24.0rc3 pre-release

Apr 13, 2026

1.24.0rc2 pre-release

Apr 13, 2026

1.23.1

Mar 8, 2026

1.23.0

Mar 8, 2026

1.23.0rc7 pre-release

Mar 8, 2026

1.23.0rc6 pre-release

Mar 8, 2026

1.23.0rc5 pre-release

Feb 25, 2026

1.23.0rc1 pre-release

Feb 23, 2026

1.22.0

Jan 17, 2026

1.21.0

Jan 16, 2026

1.20.0

Jan 6, 2026

1.19.0

Dec 18, 2025

1.18.0

Nov 29, 2025

1.18.0rc3 pre-release

Nov 29, 2025

1.18.0rc2 pre-release

Nov 29, 2025

1.17.0

Nov 25, 2025

1.16.3

Nov 5, 2025

1.16.2

Nov 2, 2025

1.16.1

Oct 29, 2025

1.16.0

Oct 24, 2025

1.15.2

Oct 14, 2025

1.15.1

Oct 14, 2025

1.15.0

Oct 13, 2025

1.14.2

Sep 29, 2025

1.14.1

Sep 26, 2025

1.14.0

Sep 26, 2025

1.13.0

Sep 12, 2025

1.12.1

Aug 15, 2025

1.12.0

Aug 13, 2025

1.11.1rc1 pre-release

Jul 2, 2025

1.11.0

Jun 30, 2025

1.10.0

Jun 26, 2025

1.9.0

May 30, 2025

1.8.0

May 20, 2025

1.8.0rc2 pre-release

May 20, 2025

1.8.0rc1 pre-release

May 20, 2025

1.7.0

May 9, 2025

1.6.0

Apr 20, 2025

1.5.2

Mar 23, 2025

1.5.1

Mar 12, 2025

1.5.0

Mar 11, 2025

1.4.1

Feb 25, 2025

1.4.0

Feb 25, 2025

1.3.1

Feb 9, 2025

1.3.0

Jan 29, 2025

1.2.2

Jan 19, 2025

1.2.1

Jan 18, 2025

1.2.0

Jan 18, 2025

1.1.1

Jan 13, 2025

1.1.0

Jan 13, 2025

1.0.1

Jan 7, 2025

1.0.0

Jan 2, 2025

0.10.0

Dec 19, 2024

0.9.2

Dec 15, 2024

0.9.1

Dec 12, 2024

0.9.0

Dec 12, 2024

0.8.0

Dec 6, 2024

zizmor 1.28.0

🌈 zizmor

License

Contributing

The name?

Sponsors

Star History

Project links

Key dates

1 maintainer

Credits

GitHub Statistics

License

Requires

Download files

Source Distribution

Built Distributions

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

Release history Release notifications | RSS feed