Commit graph

26 commits

Author SHA1 Message Date
William Woodruff
5b7e8bcd72
bench: offline benchmarks (#1444) 2025-12-14 18:24:23 -08:00
William Woodruff
2e85156ddf
feat: make zizmor's core async (#1314)
Some checks are pending
CI / Lint (push) Waiting to run
CI / Test (push) Waiting to run
CI / Test site build (push) Waiting to run
CI / All tests pass (push) Blocked by required conditions
zizmor wheel builds for PyPI 🐍 / Build Linux wheels (manylinux) (push) Waiting to run
zizmor wheel builds for PyPI 🐍 / Build Linux wheels (musllinux) (push) Waiting to run
zizmor wheel builds for PyPI 🐍 / Build Windows wheels (push) Waiting to run
zizmor wheel builds for PyPI 🐍 / Build macOS wheels (push) Waiting to run
zizmor wheel builds for PyPI 🐍 / Build source distribution (push) Waiting to run
zizmor wheel builds for PyPI 🐍 / Release (push) Blocked by required conditions
Deploy zizmor documentation site 🌐 / Deploy zizmor documentation to GitHub Pages 🌐 (push) Waiting to run
GitHub Actions Security Analysis with zizmor 🌈 / Run zizmor 🌈 (push) Waiting to run
2025-11-07 19:04:53 -05:00
William Woodruff
385b5f78a9
bench: add support for online benchmarks (#1258) 2025-10-15 20:46:13 -04:00
William Woodruff
365630375d
chore(docs): update trophy qualification to 500 stars (#1144) 2025-09-12 01:56:57 +00:00
William Woodruff
acd227abd6
chore(docs): improve the dev docs a bit (#1050)
* chore(docs): update some dev instructions

* chore(docs): document the benchmarking components
2025-07-31 23:38:10 +00:00
William Woodruff
5948f83884
chore: limit pinact to docs, document usage (#818) 2025-05-18 23:33:34 +00:00
William Woodruff
19b6bd6cc1
refactor: switch to workspace layout (#792) 2025-05-13 21:29:19 -04:00
William Woodruff
b2804996c0
chore(docs): the great @zizmorcore renaming (#776) 2025-05-09 20:08:45 -04:00
Travis Truman
a8baaa417a
docs: alpha sort audit doc contents by audit name (#741) 2025-05-02 14:38:27 -04:00
Marcono1234
d55fb35ff3
doc: mention insta --force-update-snapshots (#728) 2025-04-30 21:53:58 +00:00
William Woodruff
91abf6b09e
tests: add repro case for #612 (#616)
* tests: add repro case for #612

Signed-off-by: William Woodruff <william@yossarian.net>

* generalized location kinds

Signed-off-by: William Woodruff <william@yossarian.net>

* record changes

Signed-off-by: William Woodruff <william@yossarian.net>

* docs: development: add a section on adding locations to audits

Signed-off-by: William Woodruff <william@yossarian.net>

* invisible -> hidden

Signed-off-by: William Woodruff <william@yossarian.net>

---------

Signed-off-by: William Woodruff <william@yossarian.net>
2025-03-19 14:36:09 +00:00
William Woodruff
43a1d5e7cd
feat(cli): fine-grained color control (#586)
* feat(cli): fine-grained color control

This doesn't quite work yet, since tracing_indicatif
and anstream::AutoStream don't compose cleanly.

* main: hack on color controls more

Signed-off-by: William Woodruff <william@yossarian.net>

* cli: finalize color control

* remove dbg

* make snippets

* record changes

* usage: document --color option

* tests: proper color control and progress bar tests

* ci: enable tty-tests

* docs: document TTY tests

* better unbuffer failure errors

* ci: install expect for tty-tests

* remove unused import

---------

Signed-off-by: William Woodruff <william@yossarian.net>
2025-03-09 16:16:23 -04:00
William Woodruff
b7b1889a03
test: refactor integration tests (#576) 2025-02-27 00:14:29 -05:00
William Woodruff
871fa31bcc
bugfix: fix has_tag lookup (#519)
* bugfix: fix has_tag lookup

This caused false positives in the `ref-confusion`
audit by using the wrong endpoint. The correct
endpoint only returns the exact matching tag or
404, rather than a list of one or more
partial matches.

Signed-off-by: William Woodruff <william@yossarian.net>

* tests: add repro for #518

This ended up being somewhat involved, since
the tests expect to pass `--offline` unconditionally.

Signed-off-by: William Woodruff <william@yossarian.net>

* add test features

Signed-off-by: William Woodruff <william@yossarian.net>

* run online tests

Signed-off-by: William Woodruff <william@yossarian.net>

* release-notes: record changes

Signed-off-by: William Woodruff <william@yossarian.net>

* docs: explain online tests

Signed-off-by: William Woodruff <william@yossarian.net>

---------

Signed-off-by: William Woodruff <william@yossarian.net>
2025-02-05 22:39:44 +01:00
William Woodruff
8672c8bed9
docs: update dev-docs (#505)
Signed-off-by: William Woodruff <william@yossarian.net>
2025-01-31 08:01:11 +00:00
Justus Bastian Flügel
66c6fb66ad
docs: Fix typo in development.md (#305) 2024-12-16 00:52:13 +00:00
William Woodruff
71619c4749
docs: make the trophy case prettier (#279) 2024-12-11 22:45:27 -05:00
Viktor Szépe
198fd0d182
docs: Rename "unsecure" to insecure (#270) 2024-12-10 14:54:02 -05:00
William Woodruff
6bdc1cad69
test: snapshot tests (#220) 2024-11-30 22:01:49 -05:00
William Woodruff
b458e6bac2
docs: add page descriptions (#194) 2024-11-24 13:58:01 -05:00
William Woodruff
1ab0c49326
refactor: add Audit supertrait (#188) 2024-11-23 16:05:11 -05:00
William Woodruff
f0627d32c7
refactor: simplify use of WorkflowAudit trait (#185) 2024-11-22 18:37:39 -05:00
Ubiratan Soares
a6db64af05
docs: adds recommentations on how to add or change audits (#182)
Co-authored-by: William Woodruff <william@yossarian.net>
2024-11-20 17:45:51 -05:00
William Woodruff
1f49939c39
docs: misc improvements (#143) 2024-11-10 10:54:11 -05:00
William Woodruff
dd96bde574
doc: mention conventional commits
Signed-off-by: William Woodruff <william@yossarian.net>
2024-11-01 10:13:15 -04:00
William Woodruff
0ce62213f4
feat: begin prepping zizmor's website (#78) 2024-10-30 00:26:18 -04:00