zizmor

🌈 zizmor zizmor 是一个用于 CI/CD 系统的静态分析工具。 它可以发现并修复常见 CI/CD 设置中的安全问题，包括 GitHub Actions、Dependabot 和 pre-commit。zizmor 能够发现的一些问题： 模板注入漏洞，导致攻击者控制的代码执行 意外的凭据持久化和泄露 对运行器授予过度的权限范围和凭据 冒名提交和易混淆的 git 引用 ……还有更多！ 请参阅 zizmor 的文档 获取安装步骤、快速入门以及详细用法。 许可证 zizmor 采用 MIT 许可证。 贡献 请参阅我们的贡献指南！ 名字由来？ 现在你可以拥有漂亮干净的工作流了！ 赞助...

zizmor v1.30.0

🌈 zizmor zizmor is a static analysis tool for CI/CD systems. It can find and fix security issues in common CI/CD setups, including GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor finds: Template injection vulnerabilities, leading to attacker-controlled code execution...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: parseable, wadm, wash, sccache, zizmor, sqlx, lychee, tealdeer, shadowsocks-rust, rustup, kdash, rye, buck2, wasm-pack, ntpd-rs, xh, zed, rustls-ffi, pixi, zola, sdp-k8s-injector, atuin, nushell, samply, linkerd-extension-init, cargo-audit, oranda, deno, wasmcloud,...

GHSA-82J2-J2CH-GFR8 vulnerabilities

Vulnerabilities for packages: mise, rustup, fnm, xh, linkerd2-cni-plugin, sdp-k8s-injector, ztunnel, ztunnel-fips, parseable, rustls-openssl-client, shadowsocks-rust, zola, qdrant, zellij, atuin, linkerd-network-validator, rye, uv, kdash, linkerd2-proxy, linkerd-extension-init, garage, zizmor,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: parseable, sccache, linkerd2, zizmor, sqlx, ztunnel, lychee, tealdeer, berg, py3-xet-core, shadowsocks-rust, rustup, kdash, rye, buck2, wasm-pack, ntpd-rs, xh, pixi, zola, sdp-k8s-injector, atuin, zellij, samply, linkerd-extension-init, cargo-audit,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: parseable, sccache, linkerd2, zizmor, sqlx, ztunnel, lychee, tealdeer, berg, py3-xet-core, shadowsocks-rust, rustup, kdash, rye, buck2, wasm-pack, ntpd-rs, xh, pixi, zola, sdp-k8s-injector, atuin, zellij, samply, linkerd-extension-init, cargo-audit,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: mise, rustup, fnm, xh, linkerd2-cni-plugin, sdp-k8s-injector, ztunnel, ztunnel-fips, parseable, shadowsocks-rust, zola, qdrant, zellij, atuin, linkerd-network-validator, rye, uv, kdash, linkerd2-proxy, linkerd-extension-init, garage, zizmor, pixi, deno, tealdeer,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: mise, rustup, fnm, xh, linkerd2-cni-plugin, sdp-k8s-injector, ztunnel, ztunnel-fips, parseable, shadowsocks-rust, zola, qdrant, zellij, atuin, linkerd-network-validator, rye, uv, kdash, linkerd2-proxy, linkerd-extension-init, garage, zizmor, pixi, deno, tealdeer,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: parseable, mountpoint-s3, wadm, sccache, linkerd2, zizmor, sqlx, wizer, just, lychee, starship, yara-x, netavark, berg, yazi, py3-xet-core, rav1e, shadowsocks-rust, rustup, kdash, rye, buck2, zed, ntpd-rs, xh, pixi, ruff, uutils, zola, sdp-k8s-injector, fish, atuin,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: mise, rustup, fnm, xh, biome, sdp-k8s-injector, starship, virtiofsd, apollo-router, parseable, shadowsocks-rust, uutils, zola, qdrant, zed, yara-x, netavark, zellij, atuin, watchexec, valkey-ldap, linkerd-network-validator, mdbook, bootc, rye, uv, kdash,...