Skip to main content
Pre-release

This release is a pre-release and may not be stable for production use.

🌈 zizmor

zizmor CI Crates.io Packaging status GitHub Sponsors Discord

zizmor is a static analysis tool for CI/CD systems.

It can find and fix security issues in common CI/CD setups, including GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor finds:

  • Template injection vulnerabilities, leading to attacker-controlled code execution
  • Accidental credential persistence and leakage
  • Excessive permission scopes and credential grants to runners
  • Impostor commits and confusable git references
  • ...and much more!

zizmor demo

See zizmor's documentation for installation steps, as well as a quickstart and detailed usage recipes.

License

zizmor is licensed under the MIT License.

Contributing

See our contributing guide!

The name?

Now you can have beautiful clean workflows!

Sponsors

zizmor's development is supported by these amazing sponsors!

Logo-level sponsors

Grafana Labs

Trail of Bits

Kusari

Tracebit

Name-level sponsors
Alexander Riccio Carol Willing

Want to see your name or logo above? Consider becoming a sponsor through one of the following:

Star History

Star History Chart

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

zizmor-1.30.0rc1.tar.gz (567.6 kB view details)

Uploaded Source

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

zizmor-1.30.0rc1-py3-none-win_amd64.whl (8.8 MB view details)

Uploaded Python 3Windows x86-64

zizmor-1.30.0rc1-py3-none-win32.whl (7.7 MB view details)

Uploaded Python 3Windows x86

zizmor-1.30.0rc1-py3-none-musllinux_1_2_x86_64.whl (9.5 MB view details)

Uploaded Python 3musllinux: musl 1.2+ x86-64

zizmor-1.30.0rc1-py3-none-musllinux_1_2_armv7l.whl (8.5 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARMv7l

zizmor-1.30.0rc1-py3-none-musllinux_1_2_aarch64.whl (8.9 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARM64

zizmor-1.30.0rc1-py3-none-manylinux_2_28_x86_64.whl (9.4 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ x86-64

zizmor-1.30.0rc1-py3-none-manylinux_2_28_armv7l.whl (8.5 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ ARMv7l

zizmor-1.30.0rc1-py3-none-manylinux_2_24_aarch64.whl (8.9 MB view details)

Uploaded Python 3manylinux: glibc 2.24+ ARM64

zizmor-1.30.0rc1-py3-none-macosx_11_0_arm64.whl (8.6 MB view details)

Uploaded Python 3macOS 11.0+ ARM64

zizmor-1.30.0rc1-py3-none-macosx_10_12_x86_64.whl (9.0 MB view details)

Uploaded Python 3macOS 10.12+ x86-64

File details

Details for the file zizmor-1.30.0rc1.tar.gz.

File metadata

  • Download URL: zizmor-1.30.0rc1.tar.gz
  • Upload date:
  • Size: 567.6 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.3 {"installer":{"name":"uv","version":"0.12.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc1.tar.gz
Algorithm Hash digest
SHA256 e3a026f2624f137257f6892f263a8e1661a873747409ee9fe6f29459b28c3962
MD5 744cb6503bc11984160c5b9cc3c6263a
BLAKE2b-256 7c66165928565370f791e12c57fa2d6358f6a4aa84692bf498a18c495482c713

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0rc1-py3-none-win_amd64.whl.

File metadata

  • Download URL: zizmor-1.30.0rc1-py3-none-win_amd64.whl
  • Upload date:
  • Size: 8.8 MB
  • Tags: Python 3, Windows x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.3 {"installer":{"name":"uv","version":"0.12.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc1-py3-none-win_amd64.whl
Algorithm Hash digest
SHA256 21c3514c645030e913a6175db1a634e319da7bc10055d20e40427a76278f8dc0
MD5 6dd67ca84e2ecf8429503a88c8a44aa5
BLAKE2b-256 d072b7c6d8a1b71ea6dbbe3e739be093adf479d8eb5d479697e4be94280f6368

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0rc1-py3-none-win32.whl.

File metadata

  • Download URL: zizmor-1.30.0rc1-py3-none-win32.whl
  • Upload date:
  • Size: 7.7 MB
  • Tags: Python 3, Windows x86
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.3 {"installer":{"name":"uv","version":"0.12.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc1-py3-none-win32.whl
Algorithm Hash digest
SHA256 8a12cab0729b17e379b4526750b19a2a6475fd3dd6b283ea3598f3d280f2c36f
MD5 42206f3e6332a823776ae1e7413511b7
BLAKE2b-256 3a529886154241e0e24b8629038f795903c535bed2deaa9ade94cc08036315fd

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0rc1-py3-none-musllinux_1_2_x86_64.whl.

File metadata

  • Download URL: zizmor-1.30.0rc1-py3-none-musllinux_1_2_x86_64.whl
  • Upload date:
  • Size: 9.5 MB
  • Tags: Python 3, musllinux: musl 1.2+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.3 {"installer":{"name":"uv","version":"0.12.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc1-py3-none-musllinux_1_2_x86_64.whl
Algorithm Hash digest
SHA256 4dae4ca3865ddd089ef1aef16e0a847cbe96305be3920b928eedce99e3c27f40
MD5 5933a877af601bf7c2eff7b131af1705
BLAKE2b-256 d6704d4771b5f9afd67f73cdeff48ab5a5041b4fcbc3de4636a8e2fa32b9c8c4

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0rc1-py3-none-musllinux_1_2_armv7l.whl.

File metadata

  • Download URL: zizmor-1.30.0rc1-py3-none-musllinux_1_2_armv7l.whl
  • Upload date:
  • Size: 8.5 MB
  • Tags: Python 3, musllinux: musl 1.2+ ARMv7l
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.3 {"installer":{"name":"uv","version":"0.12.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc1-py3-none-musllinux_1_2_armv7l.whl
Algorithm Hash digest
SHA256 4c78a513e29017e8a403c0a6402bc5d67291c738ecce97353ae9b1fac12d0672
MD5 ba07cffac8944375cd03781dba3dcacf
BLAKE2b-256 0bfb4c75be33af9e181d9bc90fb8f5540f35e1f25ec8fe05dabb6fd7b0021914

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0rc1-py3-none-musllinux_1_2_aarch64.whl.

File metadata

  • Download URL: zizmor-1.30.0rc1-py3-none-musllinux_1_2_aarch64.whl
  • Upload date:
  • Size: 8.9 MB
  • Tags: Python 3, musllinux: musl 1.2+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.3 {"installer":{"name":"uv","version":"0.12.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc1-py3-none-musllinux_1_2_aarch64.whl
Algorithm Hash digest
SHA256 d4a1981a1b1a7aec9f5309d65b4086a6de1ff42f42eb6e205eb131b8dd5459a9
MD5 4faf108d4bdf32de9049d771aded7a76
BLAKE2b-256 87469cc94022c9af9e3bd1d07601e93f467fdf82fb7ed980a38738fd53f41aa3

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0rc1-py3-none-manylinux_2_28_x86_64.whl.

File metadata

  • Download URL: zizmor-1.30.0rc1-py3-none-manylinux_2_28_x86_64.whl
  • Upload date:
  • Size: 9.4 MB
  • Tags: Python 3, manylinux: glibc 2.28+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.3 {"installer":{"name":"uv","version":"0.12.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc1-py3-none-manylinux_2_28_x86_64.whl
Algorithm Hash digest
SHA256 ae11b6addd96bb0a94873d5d24e249d468f95da50a87d35e6fd17d4cdca92903
MD5 eb05faaacf56cb6b9689205c2294e1b3
BLAKE2b-256 e20126a6954e1deacbf5a5eff20142cbada671431803600bae1991b538ba7978

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0rc1-py3-none-manylinux_2_28_armv7l.whl.

File metadata

  • Download URL: zizmor-1.30.0rc1-py3-none-manylinux_2_28_armv7l.whl
  • Upload date:
  • Size: 8.5 MB
  • Tags: Python 3, manylinux: glibc 2.28+ ARMv7l
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.3 {"installer":{"name":"uv","version":"0.12.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc1-py3-none-manylinux_2_28_armv7l.whl
Algorithm Hash digest
SHA256 66242de19c08245e86f9a98c1d353d943154855f4a9007cd5bad0243fa4252fc
MD5 69b16d7a28127eb29d58a431736f36c0
BLAKE2b-256 3c8e57d6e1ca258016a94123b369eb923badde48cc218853e2666bd213acdb88

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0rc1-py3-none-manylinux_2_24_aarch64.whl.

File metadata

  • Download URL: zizmor-1.30.0rc1-py3-none-manylinux_2_24_aarch64.whl
  • Upload date:
  • Size: 8.9 MB
  • Tags: Python 3, manylinux: glibc 2.24+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.3 {"installer":{"name":"uv","version":"0.12.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc1-py3-none-manylinux_2_24_aarch64.whl
Algorithm Hash digest
SHA256 e89bcf1e849dc2c32d0eba180c540b5ed9807e95a093ba1816a37119e41554ee
MD5 e4212ed1d899b7371e247612ad861e87
BLAKE2b-256 3abb0ab94dedcc94de577db1e4852b7cc83bea9b9c7dedc3140d652836c775d5

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0rc1-py3-none-macosx_11_0_arm64.whl.

File metadata

  • Download URL: zizmor-1.30.0rc1-py3-none-macosx_11_0_arm64.whl
  • Upload date:
  • Size: 8.6 MB
  • Tags: Python 3, macOS 11.0+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.3 {"installer":{"name":"uv","version":"0.12.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc1-py3-none-macosx_11_0_arm64.whl
Algorithm Hash digest
SHA256 eaeabf014307c01fdc0dd0aa9c1c000c7307f5b20cecdd10f98dd7b79ed0c1fb
MD5 358415202936698fb7fb23a821059b4c
BLAKE2b-256 2b9a09f128c9856ec57c6bcf5c82b6e61875061571129d5932f9ee3d14f2ddc9

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0rc1-py3-none-macosx_10_12_x86_64.whl.

File metadata

  • Download URL: zizmor-1.30.0rc1-py3-none-macosx_10_12_x86_64.whl
  • Upload date:
  • Size: 9.0 MB
  • Tags: Python 3, macOS 10.12+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.3 {"installer":{"name":"uv","version":"0.12.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc1-py3-none-macosx_10_12_x86_64.whl
Algorithm Hash digest
SHA256 03735dee2bf05b07ae4ecce190025844fe9a834e9e2ad5d17fd082cf13b16cb9
MD5 033abf7260f2d8cece451904ec0881ec
BLAKE2b-256 3e116373ebd4bdb9dc227b515bac0fac8ee0fd0d222130230bf69496c44591c1

See more details on using hashes here.

Release history Release notifications | RSS feed

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page