zizmor

🌈 zizmor zizmor es una herramienta de análisis estático para sistemas CI/CD. Puede encontrar y corregir problemas de seguridad en configuraciones comunes de CI/CD, incluyendo GitHub Actions, Dependabot y pre-commit. Algunas de las cosas que zizmor encuentra: Vulnerabilidades de inyección de...

zizmor v1.30.0

🌈 zizmor zizmor is a static analysis tool for CI/CD systems. It can find and fix security issues in common CI/CD setups, including GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor finds: Template injection vulnerabilities, leading to attacker-controlled code execution...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: wasmcloud, sqlx, tealdeer, linkerd2-proxy, pixi, atuin, xh, deno, linkerd-extension-init, wasmtime, lychee, wasm-pack, samply, ntpd-rs, zed, sccache, oranda, kdash, nushell, zola, buck2, wadm, parseable, sdp-k8s-injector, rye, qdrant, wash, cargo-audit, uv, rustup,...

GHSA-82J2-J2CH-GFR8 vulnerabilities

Vulnerabilities for packages: komodo, fnm, tealdeer, rustls-openssl-client, deno, atuin, wasm-pack, parseable, shadowsocks-rust, zellij, ztunnel-fips, linkerd2-proxy, linkerd2-cni-plugin, mise, sdp-k8s-injector, wasmcloud, qdrant, lakekeeper, wasmtime, pixi, ntpd-rs, sccache, nushell, berg,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: wasmcloud, sqlx, tealdeer, zellij, linkerd-network-validator, linkerd2-proxy, pixi, atuin, xh, deno, linkerd-extension-init, wasmtime, lychee, berg, samply, ntpd-rs, wasm-pack, py3-xet-core, sccache, ztunnel, kdash, zola, buck2, parseable, sdp-k8s-injector, rye,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: wasmcloud, sqlx, tealdeer, zellij, linkerd-network-validator, linkerd2-proxy, pixi, atuin, xh, deno, linkerd-extension-init, wasmtime, lychee, berg, samply, ntpd-rs, wasm-pack, py3-xet-core, sccache, ztunnel, kdash, zola, buck2, parseable, sdp-k8s-injector, rye,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: komodo, fnm, tealdeer, deno, atuin, wasm-pack, parseable, shadowsocks-rust, zellij, ztunnel-fips, linkerd2-proxy, linkerd2-cni-plugin, mise, sdp-k8s-injector, wasmcloud, qdrant, lakekeeper, wasmtime, pixi, ntpd-rs, sccache, samply, berg, asciinema, xh, cargo-audit,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: komodo, fnm, tealdeer, deno, atuin, wasm-pack, parseable, shadowsocks-rust, zellij, ztunnel-fips, linkerd2-proxy, linkerd2-cni-plugin, mise, sdp-k8s-injector, wasmcloud, qdrant, lakekeeper, wasmtime, pixi, ntpd-rs, sccache, samply, berg, asciinema, xh, cargo-audit,...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: wasmcloud, starship, pgcat, sqlx, biome, efs-utils, just, linkerd-network-validator, linkerd2-proxy, netavark, zellij, pixi, atuin, xh, ruff, uutils, deno, mountpoint-s3, mdbook, rav1e, wasmtime, lychee, berg, samply, ntpd-rs, zed, py3-xet-core, sccache, wizer, kdash...

GHSA-CQ8V-F236-94QC vulnerabilities

Vulnerabilities for packages: komodo, fnm, mountpoint-s3, deno, guestproxyagent, atuin, yazi, parseable, shadowsocks-rust, valkey-ldap, zellij, efs-utils, vector, linkerd2-proxy, fish, hurl, watchexec, mise, sdp-k8s-injector, wasmcloud, qdrant, just, mdbook, wasmtime, ruff, jujutsu, virtiofsd,...