zizmor

About this project

🌈 zizmor zizmor is a static analysis tool for CI/CD systems. It can find and fix security issues in common CI/CD setups, including GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor finds: Template injection vulnerabilities, leading to attacker-controlled code execution Accidental credential persistence and leakage Excessive permission scopes and credential grants to runners Impostor commits and confusable git references ...[and much more]! See zizmor's documentation for [installation steps], as well as a [quickstart] and [detailed usage recipes]. License zizmor is licensed under the MIT License. Contributing See our…

GitHub

Reviews

Built by

zizmorcore

Imported from GitHub · not yet claimed on GitPalace

View developer pageSign in with GitHub to claim

Maintain zizmorcore/zizmor? Claiming verifies admin access through your GitHub account and gives you control of this listing.

You might also like

awesome-selfhosted

Security

A list of Free Software network services and web applications which can be hosted on your own servers

★ New317.5K stars

by awesome-selfhosted

the-book-of-secret-knowledge

Security

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

★ New242.4K stars

by trimstray

Awesome-Hacking

Security

A collection of various awesome lists for hackers, pentesters and security researchers

★ New119.8K stars

by Hack-with-Github

sherlock

Security

Hunt down social media accounts by username across social networks

★ New91K stars

by sherlock-project