🌈 zizmor

zizmor CI Crates.io Packaging status GitHub Sponsors Discord

zizmor is a static analysis tool for CI/CD systems.

It can find and fix security issues in common CI/CD setups, including GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor finds:

  • Template injection vulnerabilities, leading to attacker-controlled code execution
  • Accidental credential persistence and leakage
  • Excessive permission scopes and credential grants to runners
  • Impostor commits and confusable git references
  • ...and much more!

zizmor demo

See zizmor's documentation for installation steps, as well as a quickstart and detailed usage recipes.

License

zizmor is licensed under the MIT License.

Contributing

See our contributing guide!

The name?

Now you can have beautiful clean workflows!

Sponsors

zizmor's development is supported by these amazing sponsors!

Logo-level sponsors

Grafana Labs
Trail of Bits
Kusari
Tracebit
Name-level sponsors
Alexander Riccio Carol Willing

Want to see your name or logo above? Consider becoming a sponsor through one of the following:

Star History

Star History Chart

Project links

Data verified by PyPI on Aug 30, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Latest release

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for woodruffw from gravatar.com woodruffw

GitHub Statistics

Data verified by PyPI on Aug 30, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License

MIT

Requires

Python >=3.10

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

zizmor-1.30.0.tar.gz (575.5 kB view details)

Uploaded Source

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

zizmor-1.30.0-py3-none-win_amd64.whl (8.9 MB view details)

Uploaded Python 3Windows x86-64

zizmor-1.30.0-py3-none-win32.whl (7.8 MB view details)

Uploaded Python 3Windows x86

zizmor-1.30.0-py3-none-musllinux_1_2_x86_64.whl (9.5 MB view details)

Uploaded Python 3musllinux: musl 1.2+ x86-64

zizmor-1.30.0-py3-none-musllinux_1_2_armv7l.whl (8.6 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARMv7l

zizmor-1.30.0-py3-none-musllinux_1_2_aarch64.whl (9.0 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARM64

zizmor-1.30.0-py3-none-manylinux_2_28_x86_64.whl (9.4 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ x86-64

zizmor-1.30.0-py3-none-manylinux_2_28_armv7l.whl (8.6 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ ARMv7l

zizmor-1.30.0-py3-none-manylinux_2_24_aarch64.whl (9.0 MB view details)

Uploaded Python 3manylinux: glibc 2.24+ ARM64

zizmor-1.30.0-py3-none-macosx_11_0_arm64.whl (8.7 MB view details)

Uploaded Python 3macOS 11.0+ ARM64

zizmor-1.30.0-py3-none-macosx_10_12_x86_64.whl (9.1 MB view details)

Uploaded Python 3macOS 10.12+ x86-64

File details

Details for the file zizmor-1.30.0.tar.gz.

File metadata

  • Download URL: zizmor-1.30.0.tar.gz
  • Upload date:
  • Size: 575.5 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0.tar.gz
Algorithm Hash digest
SHA256 9a17ac3bb043afbbd9d3c8b6f309fa5b319c6a32e3259fbaf050f6fcd3d0a9cd
MD5 2f0f10ad146554080acab418f60e82de
BLAKE2b-256 0578e32b0b913535def3e050cd0c4202aff11f10deb53e9844f42af37aa267e3

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0-py3-none-win_amd64.whl.

File metadata

  • Download URL: zizmor-1.30.0-py3-none-win_amd64.whl
  • Upload date:
  • Size: 8.9 MB
  • Tags: Python 3, Windows x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0-py3-none-win_amd64.whl
Algorithm Hash digest
SHA256 ca321b5b1cb85d08ac0c3c86275bfd5a6b5564c176437e3b41e10bd1e4463296
MD5 7cf0341bdf43408431ce4048ecdc8bbf
BLAKE2b-256 8cb995d0cc6d169a43ad0c2a33c1395c0e5cde265880fa62e5d26a3b502a003c

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0-py3-none-win32.whl.

File metadata

  • Download URL: zizmor-1.30.0-py3-none-win32.whl
  • Upload date:
  • Size: 7.8 MB
  • Tags: Python 3, Windows x86
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0-py3-none-win32.whl
Algorithm Hash digest
SHA256 39f15155db3e4af9bb5cf125a236c67fd84ddd3174f60b4111b27c691b337e00
MD5 9c0eb473eba0b55a134c8ae82fc96cd8
BLAKE2b-256 0ef5e5296d51f494de21f5da44b3d7bf270d1aae7fdf92b240e871cd2e975717

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0-py3-none-musllinux_1_2_x86_64.whl.

File metadata

  • Download URL: zizmor-1.30.0-py3-none-musllinux_1_2_x86_64.whl
  • Upload date:
  • Size: 9.5 MB
  • Tags: Python 3, musllinux: musl 1.2+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0-py3-none-musllinux_1_2_x86_64.whl
Algorithm Hash digest
SHA256 1f15ed62ff34ad7875427384b03a2f72995d9ab8ddcb50dc141b25763de3aaa2
MD5 9e5b48e754176c02619208b6423e57ee
BLAKE2b-256 9784ef925827d7d7d6baba31194bf9712d74df37a0e4ac361b8dbdbb2d4a9597

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0-py3-none-musllinux_1_2_armv7l.whl.

File metadata

  • Download URL: zizmor-1.30.0-py3-none-musllinux_1_2_armv7l.whl
  • Upload date:
  • Size: 8.6 MB
  • Tags: Python 3, musllinux: musl 1.2+ ARMv7l
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0-py3-none-musllinux_1_2_armv7l.whl
Algorithm Hash digest
SHA256 0148b61f6315ad363ae748f838e8ed81e1cfb3ade6bbe480e7516e4fba630b82
MD5 07cd922b66486ee437b676ccadddca86
BLAKE2b-256 d4b9649a07ff353d84362779bd747c945e5af23c54e94e4633751e3fa6b88099

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0-py3-none-musllinux_1_2_aarch64.whl.

File metadata

  • Download URL: zizmor-1.30.0-py3-none-musllinux_1_2_aarch64.whl
  • Upload date:
  • Size: 9.0 MB
  • Tags: Python 3, musllinux: musl 1.2+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0-py3-none-musllinux_1_2_aarch64.whl
Algorithm Hash digest
SHA256 baa02978518248bf9f011e6ceca7b7c5efb5b893810cd4954e01785e1b68f959
MD5 283ceb84793198d42a465c6090694256
BLAKE2b-256 e352c88a4a492b21e7f5891140a48d97fc92b389ddce899d80ce12d7a60e278b

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0-py3-none-manylinux_2_28_x86_64.whl.

File metadata

  • Download URL: zizmor-1.30.0-py3-none-manylinux_2_28_x86_64.whl
  • Upload date:
  • Size: 9.4 MB
  • Tags: Python 3, manylinux: glibc 2.28+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0-py3-none-manylinux_2_28_x86_64.whl
Algorithm Hash digest
SHA256 9c08a7c34b33ed6f9a3a3d28fcf8c64e3e078c53c51bc9ce05c32ec3ba7feae9
MD5 96d40ca5a7df62496b811bd52cb56112
BLAKE2b-256 7c79ac655d04c89356b40a4f8166ede50ba207cfc0ea1410f99544e9d55a111b

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0-py3-none-manylinux_2_28_armv7l.whl.

File metadata

  • Download URL: zizmor-1.30.0-py3-none-manylinux_2_28_armv7l.whl
  • Upload date:
  • Size: 8.6 MB
  • Tags: Python 3, manylinux: glibc 2.28+ ARMv7l
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0-py3-none-manylinux_2_28_armv7l.whl
Algorithm Hash digest
SHA256 0e69a86290dff4c41b51c381a27029b5dc2b748c0510a9a333b18f862ea1bc68
MD5 18719c699a53535269b07c9abad32fa7
BLAKE2b-256 842da2f8d3d78d56fdaa5da4fc71e86dfed50006a197ff30b2363e759a1c4b92

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0-py3-none-manylinux_2_24_aarch64.whl.

File metadata

  • Download URL: zizmor-1.30.0-py3-none-manylinux_2_24_aarch64.whl
  • Upload date:
  • Size: 9.0 MB
  • Tags: Python 3, manylinux: glibc 2.24+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0-py3-none-manylinux_2_24_aarch64.whl
Algorithm Hash digest
SHA256 7569a58319fb270c14a64663a6565929035f26f6f6d13059314f796e988129eb
MD5 46660ee7a9eda388dc554feed614feaf
BLAKE2b-256 82b6019b9af74ae9c9472e4804801c61f18b5394392142b0c6c2b4651161d21a

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0-py3-none-macosx_11_0_arm64.whl.

File metadata

  • Download URL: zizmor-1.30.0-py3-none-macosx_11_0_arm64.whl
  • Upload date:
  • Size: 8.7 MB
  • Tags: Python 3, macOS 11.0+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0-py3-none-macosx_11_0_arm64.whl
Algorithm Hash digest
SHA256 e4193537785dd07177227e4695871ffae1d7fe3f6043c217498445e71b477bc1
MD5 158fb4b8e3a24f8688cdd0a7ac70fce4
BLAKE2b-256 1f3c0b7fa1cf59784f743874a76db860a192bc319ff575f74277fa37e0a81d24

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0-py3-none-macosx_10_12_x86_64.whl.

File metadata

  • Download URL: zizmor-1.30.0-py3-none-macosx_10_12_x86_64.whl
  • Upload date:
  • Size: 9.1 MB
  • Tags: Python 3, macOS 10.12+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0-py3-none-macosx_10_12_x86_64.whl
Algorithm Hash digest
SHA256 51c96204572b9f96b940806a371a9c57c8cff30cf93d3bd73c2febe483f942df
MD5 24467ebecc4d3ad38afeebe9ab63c01d
BLAKE2b-256 2ed2a6eb24a670ce7466c0d6b2ca9e9673aa403f07786af7e5d7e593dace4e40

See more details on using hashes here.

Release history Release notifications | RSS feed

This release

1.30.0 This release

11 files

Pre-release

1.30.0rc2

11 files

Pre-release

1.30.0rc1

11 files

1.29.0

11 files

1.28.0

11 files

Yanked

1.27.0

11 files

Yanked reason: GHSA-f42p-wjw5-97qh

1.26.1

11 files

1.26.0

11 files

1.25.2

11 files

1.25.1

11 files

1.25.0

11 files

1.24.1

11 files

1.24.0

11 files

Pre-release

1.24.0rc3

11 files

Pre-release

1.24.0rc2

11 files

1.23.1

11 files

1.23.0

11 files

Pre-release

1.23.0rc7

11 files

Pre-release

1.23.0rc6

11 files

Pre-release

1.23.0rc5

11 files

Pre-release

1.23.0rc1

11 files

1.22.0

11 files

1.21.0

11 files

1.20.0

11 files

1.19.0

11 files

1.18.0

11 files

Pre-release

1.18.0rc3

11 files

Pre-release

1.18.0rc2

2 files

1.17.0

11 files

1.16.3

11 files

1.16.2

11 files

1.16.1

11 files

1.16.0

11 files

1.15.2

11 files

1.15.1

11 files

1.15.0

11 files

1.14.2

11 files

1.14.1

11 files

1.14.0

11 files

1.13.0

11 files

1.12.1

11 files

1.12.0

11 files

Pre-release

1.11.1rc1

11 files

1.11.0

11 files

1.10.0

11 files

1.9.0

11 files

1.8.0

11 files

Pre-release

1.8.0rc2

11 files

Pre-release

1.8.0rc1

11 files

1.7.0

11 files

1.6.0

11 files

1.5.2

11 files

1.5.1

15 files

1.5.0

15 files

1.4.1

15 files

1.4.0

15 files

1.3.1

15 files

1.3.0

15 files

1.2.2

15 files

1.2.1

15 files

1.2.0

15 files

1.1.1

14 files

1.1.0

14 files

1.0.1

14 files

1.0.0

14 files

0.10.0

14 files

0.9.2

14 files

0.9.1

14 files

0.9.0

14 files

0.8.0

14 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page