Pre-release

This release is a pre-release and may not be stable for production use.

🌈 zizmor

zizmor CI Crates.io Packaging status GitHub Sponsors Discord

zizmor is a static analysis tool for CI/CD systems.

It can find and fix security issues in common CI/CD setups, including GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor finds:

  • Template injection vulnerabilities, leading to attacker-controlled code execution
  • Accidental credential persistence and leakage
  • Excessive permission scopes and credential grants to runners
  • Impostor commits and confusable git references
  • ...and much more!

zizmor demo

See zizmor's documentation for installation steps, as well as a quickstart and detailed usage recipes.

License

zizmor is licensed under the MIT License.

Contributing

See our contributing guide!

The name?

Now you can have beautiful clean workflows!

Sponsors

zizmor's development is supported by these amazing sponsors!

Logo-level sponsors

Grafana Labs
Trail of Bits
Kusari
Tracebit
Name-level sponsors
Alexander Riccio Carol Willing

Want to see your name or logo above? Consider becoming a sponsor through one of the following:

Star History

Star History Chart

Project links

Data verified by PyPI on Aug 29, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (1.30.0)

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for woodruffw from gravatar.com woodruffw

GitHub Statistics

Data verified by PyPI on Aug 29, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License

MIT

Requires

Python >=3.10

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

zizmor-1.30.0rc2.tar.gz (575.0 kB view details)

Uploaded Source

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

zizmor-1.30.0rc2-py3-none-win_amd64.whl (8.9 MB view details)

Uploaded Python 3Windows x86-64

zizmor-1.30.0rc2-py3-none-win32.whl (7.8 MB view details)

Uploaded Python 3Windows x86

zizmor-1.30.0rc2-py3-none-musllinux_1_2_x86_64.whl (9.5 MB view details)

Uploaded Python 3musllinux: musl 1.2+ x86-64

zizmor-1.30.0rc2-py3-none-musllinux_1_2_armv7l.whl (8.6 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARMv7l

zizmor-1.30.0rc2-py3-none-musllinux_1_2_aarch64.whl (9.0 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARM64

zizmor-1.30.0rc2-py3-none-manylinux_2_28_x86_64.whl (9.4 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ x86-64

zizmor-1.30.0rc2-py3-none-manylinux_2_28_armv7l.whl (8.6 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ ARMv7l

zizmor-1.30.0rc2-py3-none-manylinux_2_24_aarch64.whl (9.0 MB view details)

Uploaded Python 3manylinux: glibc 2.24+ ARM64

zizmor-1.30.0rc2-py3-none-macosx_11_0_arm64.whl (8.7 MB view details)

Uploaded Python 3macOS 11.0+ ARM64

zizmor-1.30.0rc2-py3-none-macosx_10_12_x86_64.whl (9.1 MB view details)

Uploaded Python 3macOS 10.12+ x86-64

File details

Details for the file zizmor-1.30.0rc2.tar.gz.

File metadata

  • Download URL: zizmor-1.30.0rc2.tar.gz
  • Upload date:
  • Size: 575.0 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc2.tar.gz
Algorithm Hash digest
SHA256 ff68a4157d45d5463777ea28f7eb097395f7d8f98028ce9b93e39f9347123a71
MD5 be09be51d56b8353ec38b0e4b365b8b0
BLAKE2b-256 a1657d30509197ed3402a1d32bffce1ccf2a8177fb4b0c5576c39238297e0ec6

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0rc2-py3-none-win_amd64.whl.

File metadata

  • Download URL: zizmor-1.30.0rc2-py3-none-win_amd64.whl
  • Upload date:
  • Size: 8.9 MB
  • Tags: Python 3, Windows x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc2-py3-none-win_amd64.whl
Algorithm Hash digest
SHA256 ad62a5fdf60c3a851a3305c566a87859e20ab8009c1d7772a6df0d1dd6698215
MD5 a215ad2ab11900af448ada15adb66dc1
BLAKE2b-256 476f5a0efe72c4658183cbbc989866e01b3056b0715780a407d1016ede71a2ba

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0rc2-py3-none-win32.whl.

File metadata

  • Download URL: zizmor-1.30.0rc2-py3-none-win32.whl
  • Upload date:
  • Size: 7.8 MB
  • Tags: Python 3, Windows x86
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc2-py3-none-win32.whl
Algorithm Hash digest
SHA256 8317ead899f07cafcdd8ea72c3600b39f3acf888b999412969f4b3e48f09ecd4
MD5 46ae3a7e8f67eef1fed6c3966df0637d
BLAKE2b-256 678d1a76e5f067c77ef89de4e5c1bc20c5f914de81ad9480d3da86d8953bdca6

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0rc2-py3-none-musllinux_1_2_x86_64.whl.

File metadata

  • Download URL: zizmor-1.30.0rc2-py3-none-musllinux_1_2_x86_64.whl
  • Upload date:
  • Size: 9.5 MB
  • Tags: Python 3, musllinux: musl 1.2+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc2-py3-none-musllinux_1_2_x86_64.whl
Algorithm Hash digest
SHA256 d4c9d5423c955ab61a594f6edfc773ca581189a32442a49f1762df15d5ac2959
MD5 ad7db80a5faf16be753781267597b851
BLAKE2b-256 af0bd6e7641f75fd75fdc56184d58c90a8f7f05e72b07e0d9afa3bea7764db94

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0rc2-py3-none-musllinux_1_2_armv7l.whl.

File metadata

  • Download URL: zizmor-1.30.0rc2-py3-none-musllinux_1_2_armv7l.whl
  • Upload date:
  • Size: 8.6 MB
  • Tags: Python 3, musllinux: musl 1.2+ ARMv7l
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc2-py3-none-musllinux_1_2_armv7l.whl
Algorithm Hash digest
SHA256 e59197297d84e0f39278c41bb16c83c35cf46cb6c0b3285d69de6a40e0c618ae
MD5 9560ad412635193d6d53006e90dc4a61
BLAKE2b-256 f6561cb33cf33b19aaf3effebfbce2b73b58b20dfd41778cf406ef0f3813b3e0

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0rc2-py3-none-musllinux_1_2_aarch64.whl.

File metadata

  • Download URL: zizmor-1.30.0rc2-py3-none-musllinux_1_2_aarch64.whl
  • Upload date:
  • Size: 9.0 MB
  • Tags: Python 3, musllinux: musl 1.2+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc2-py3-none-musllinux_1_2_aarch64.whl
Algorithm Hash digest
SHA256 60e54b251212714f1a1f807a769cd9774042d480a14e48984aedc98171d7aba7
MD5 42295e2589a0860a66ad376ff2975db7
BLAKE2b-256 37acb20577d53a2ed2f088e029c0cc2a4fe7854c6cf895b55966a966ee2e506b

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0rc2-py3-none-manylinux_2_28_x86_64.whl.

File metadata

  • Download URL: zizmor-1.30.0rc2-py3-none-manylinux_2_28_x86_64.whl
  • Upload date:
  • Size: 9.4 MB
  • Tags: Python 3, manylinux: glibc 2.28+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc2-py3-none-manylinux_2_28_x86_64.whl
Algorithm Hash digest
SHA256 37d4d9d8399d08c004d0eadcd7a88da310e37f3b20c1fbea68bc7e9780039701
MD5 3aa2f865cba879939d64aeb1dc078259
BLAKE2b-256 6efcc1392ec47f8e98e4046da5d6601293b425e3c982be6efa627a922355bef5

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0rc2-py3-none-manylinux_2_28_armv7l.whl.

File metadata

  • Download URL: zizmor-1.30.0rc2-py3-none-manylinux_2_28_armv7l.whl
  • Upload date:
  • Size: 8.6 MB
  • Tags: Python 3, manylinux: glibc 2.28+ ARMv7l
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc2-py3-none-manylinux_2_28_armv7l.whl
Algorithm Hash digest
SHA256 90a441659eb7263675dc3e49eed01425b898b6ff5aae8702f5d327e2410fcfdc
MD5 6d3b745acc800f0eb4e68ed34860cd1d
BLAKE2b-256 f15c929345efc3a08fcfad9a991b2868792a84474e247156f7399b4ee326a5f3

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0rc2-py3-none-manylinux_2_24_aarch64.whl.

File metadata

  • Download URL: zizmor-1.30.0rc2-py3-none-manylinux_2_24_aarch64.whl
  • Upload date:
  • Size: 9.0 MB
  • Tags: Python 3, manylinux: glibc 2.24+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc2-py3-none-manylinux_2_24_aarch64.whl
Algorithm Hash digest
SHA256 f14725937a2255ec3fbdee98be78e39b9184390f3ee7d83423b2e4394aa2e056
MD5 16fb038a8187762d7e149c96cb989161
BLAKE2b-256 87f7c682144b7d98faa7391dfe1f28a90b2c474f347ac8a000cfe1bad37d219a

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0rc2-py3-none-macosx_11_0_arm64.whl.

File metadata

  • Download URL: zizmor-1.30.0rc2-py3-none-macosx_11_0_arm64.whl
  • Upload date:
  • Size: 8.7 MB
  • Tags: Python 3, macOS 11.0+ ARM64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc2-py3-none-macosx_11_0_arm64.whl
Algorithm Hash digest
SHA256 e2c1e22ed0f85d1e2f0230f17dcb88ab6f50cfef386ac76e92a132c15d8c1143
MD5 985b54f56381a83fae430263bdd955fa
BLAKE2b-256 94d8de0c079a33cc3fa8c4c4d0d4e6722596a0b8c5e7f0b26e29f3d1f3649d29

See more details on using hashes here.

File details

Details for the file zizmor-1.30.0rc2-py3-none-macosx_10_12_x86_64.whl.

File metadata

  • Download URL: zizmor-1.30.0rc2-py3-none-macosx_10_12_x86_64.whl
  • Upload date:
  • Size: 9.1 MB
  • Tags: Python 3, macOS 10.12+ x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.7 {"installer":{"name":"uv","version":"0.12.7","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for zizmor-1.30.0rc2-py3-none-macosx_10_12_x86_64.whl
Algorithm Hash digest
SHA256 5999b56539ca9b894f9f9035e15b2dd85d08746114c3c27188f7d989b9ced21f
MD5 40ebf6c7d4d7716263bbf86532fe293c
BLAKE2b-256 a2457ba71a5949c601e092c4cf579636c49f5528603c680dca16b1200461580a

See more details on using hashes here.

Release history Release notifications | RSS feed

1.30.0

11 files

This release
Pre-release

1.30.0rc2 This release

11 files

Pre-release

1.30.0rc1

11 files

1.29.0

11 files

1.28.0

11 files

Yanked

1.27.0

11 files

Yanked reason: GHSA-f42p-wjw5-97qh

1.26.1

11 files

1.26.0

11 files

1.25.2

11 files

1.25.1

11 files

1.25.0

11 files

1.24.1

11 files

1.24.0

11 files

Pre-release

1.24.0rc3

11 files

Pre-release

1.24.0rc2

11 files

1.23.1

11 files

1.23.0

11 files

Pre-release

1.23.0rc7

11 files

Pre-release

1.23.0rc6

11 files

Pre-release

1.23.0rc5

11 files

Pre-release

1.23.0rc1

11 files

1.22.0

11 files

1.21.0

11 files

1.20.0

11 files

1.19.0

11 files

1.18.0

11 files

Pre-release

1.18.0rc3

11 files

Pre-release

1.18.0rc2

2 files

1.17.0

11 files

1.16.3

11 files

1.16.2

11 files

1.16.1

11 files

1.16.0

11 files

1.15.2

11 files

1.15.1

11 files

1.15.0

11 files

1.14.2

11 files

1.14.1

11 files

1.14.0

11 files

1.13.0

11 files

1.12.1

11 files

1.12.0

11 files

Pre-release

1.11.1rc1

11 files

1.11.0

11 files

1.10.0

11 files

1.9.0

11 files

1.8.0

11 files

Pre-release

1.8.0rc2

11 files

Pre-release

1.8.0rc1

11 files

1.7.0

11 files

1.6.0

11 files

1.5.2

11 files

1.5.1

15 files

1.5.0

15 files

1.4.1

15 files

1.4.0

15 files

1.3.1

15 files

1.3.0

15 files

1.2.2

15 files

1.2.1

15 files

1.2.0

15 files

1.1.1

14 files

1.1.0

14 files

1.0.1

14 files

1.0.0

14 files

0.10.0

14 files

0.9.2

14 files

0.9.1

14 files

0.9.0

14 files

0.8.0

14 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page