zizmor

🌈 zizmor zizmor is a static analysis tool for CI/CD systems. It can find and fix security issues in common CI/CD setups, including GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor finds: Template injection vulnerabilities, leading to attacker-controlled code execution...

zizmor v1.30.0

🌈 zizmor zizmor is a static analysis tool for CI/CD systems. It can find and fix security issues in common CI/CD setups, including GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor finds: Template injection vulnerabilities, leading to attacker-controlled code execution...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: rustup, atuin, sqlx, parseable, zed, deno, qdrant, xh, sccache, uv, lychee, buck2, shadowsocks-rust, tealdeer, sdp-k8s-injector, wasm-pack, samply, rustls-ffi, wadm, kdash, wash, rye, zizmor, nushell, zola, pixi, wasmtime, oranda, cargo-audit, wasmcloud, ntpd-rs,...

zizmor v1.30.0-rc1

🌈 zizmor zizmor is a static analysis tool for CI/CD systems. It can find and fix security issues in common CI/CD setups, including GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor finds: Template injection vulnerabilities, leading to attacker-controlled code execution...

zizmor v1.29.0

🌈 zizmor zizmor is a static analysis tool for CI/CD systems. It can find and fix security issues in common CI/CD setups, including GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor finds: Template injection vulnerabilities, leading to attacker-controlled code execution...

GHSA-82J2-J2CH-GFR8 vulnerabilities

Vulnerabilities for packages: wasmcloud, sqlx, rustls-openssl-client, ntpd-rs, linkerd-network-validator, linkerd2-cni-plugin, ztunnel, wasmtime, xh, tealdeer, linkerd2-proxy, asciinema, fnm, komodo, buck2, wasm-pack, cargo-audit, atuin, zed, berg, py3-xet-core, sccache, linkerd2, lakekeeper,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: rustup, atuin, sqlx, parseable, py3-xet-core, linkerd2, zellij, zed, deno, qdrant, berg, xh, ztunnel, sccache, uv, lychee, buck2, shadowsocks-rust, tealdeer, sdp-k8s-injector, wasm-pack, samply, kdash, rye, linkerd-network-validator, zizmor, zola, pixi, wasmtime,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: rustup, atuin, sqlx, parseable, py3-xet-core, linkerd2, zellij, zed, deno, qdrant, berg, xh, ztunnel, sccache, uv, lychee, buck2, shadowsocks-rust, tealdeer, sdp-k8s-injector, wasm-pack, samply, kdash, rye, linkerd-network-validator, zizmor, zola, pixi, wasmtime,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: wasmcloud, sqlx, ntpd-rs, linkerd-network-validator, linkerd2-cni-plugin, ztunnel, wasmtime, xh, tealdeer, linkerd2-proxy, asciinema, fnm, komodo, buck2, wasm-pack, cargo-audit, atuin, zed, berg, py3-xet-core, sccache, linkerd2, lakekeeper, sdp-k8s-injector, deno,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: wasmcloud, sqlx, ntpd-rs, linkerd-network-validator, linkerd2-cni-plugin, ztunnel, wasmtime, xh, tealdeer, linkerd2-proxy, asciinema, fnm, komodo, buck2, wasm-pack, cargo-audit, atuin, zed, berg, py3-xet-core, sccache, linkerd2, lakekeeper, sdp-k8s-injector, deno,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: rustup, wizer, atuin, sqlx, parseable, yazi, py3-xet-core, ruff, starship, biome, linkerd2, zellij, zed, deno, qdrant, berg, xh, yara-x, sccache, mountpoint-s3, hurl, just, uv, lychee, buck2, shadowsocks-rust, vector, fish, sdp-k8s-injector, samply, wadm, kdash,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: apollo-router, sqlx, hurl, just, vector, wasmcloud, ntpd-rs, linkerd-network-validator, fish, wasmtime, wizer, pgcat, xh, rav1e, jujutsu, efs-utils, asciinema, linkerd2-proxy, chaos-tproxy, fnm, komodo, mountpoint-s3, buck2, uutils, bootc, cargo-audit, ruff, virtiofs...