mirror of
https://github.com/zizmorcore/zizmor.git
synced 2025-12-23 08:47:33 +00:00
62 lines
3.1 KiB
Text
62 lines
3.1 KiB
Text
Static analysis for GitHub Actions
|
|
|
|
Usage: zizmor [OPTIONS] <INPUTS>...
|
|
|
|
Arguments:
|
|
<INPUTS>... The inputs to audit
|
|
|
|
Options:
|
|
--lsp
|
|
Run in language server mode (EXPERIMENTAL)
|
|
-p, --pedantic
|
|
Emit 'pedantic' findings
|
|
--persona <PERSONA>
|
|
The persona to use while auditing [default: regular] [possible values: auditor, pedantic, regular]
|
|
-o, --offline
|
|
Perform only offline operations [env: ZIZMOR_OFFLINE=]
|
|
--gh-token <GH_TOKEN>
|
|
The GitHub API token to use [env: GH_TOKEN=]
|
|
--gh-hostname <GH_HOSTNAME>
|
|
The GitHub Server Hostname. Defaults to github.com [env: GH_HOST=] [default: github.com]
|
|
--no-online-audits
|
|
Perform only offline audits [env: ZIZMOR_NO_ONLINE_AUDITS=]
|
|
-v, --verbose...
|
|
Increase logging verbosity
|
|
-q, --quiet...
|
|
Decrease logging verbosity
|
|
--no-progress
|
|
Don't show progress bars, even if the terminal supports them
|
|
--format <FORMAT>
|
|
The output format to emit. By default, cargo-style diagnostics will be emitted [default: plain] [possible values: plain, json, json-v1, sarif, github]
|
|
--render-links <RENDER_LINKS>
|
|
Whether to render OSC 8 links in the output [env: ZIZMOR_RENDER_LINKS=] [default: auto] [possible values: auto, always, never]
|
|
--show-audit-urls <SHOW_AUDIT_URLS>
|
|
Whether to render audit URLs in the output, separately from any URLs embedded in OSC 8 links [env: ZIZMOR_SHOW_AUDIT_URLS=] [default: auto] [possible values: auto, always, never]
|
|
--color <MODE>
|
|
Control the use of color in output [possible values: auto, always, never]
|
|
-c, --config <CONFIG>
|
|
The configuration file to load. This loads a single configuration file across all input groups, which may not be what you intend [env: ZIZMOR_CONFIG=]
|
|
--no-config
|
|
Disable all configuration loading
|
|
--no-exit-codes
|
|
Disable all error codes besides success and tool failure
|
|
--min-severity <MIN_SEVERITY>
|
|
Filter all results below this severity [possible values: informational, low, medium, high]
|
|
--min-confidence <MIN_CONFIDENCE>
|
|
Filter all results below this confidence [possible values: low, medium, high]
|
|
--cache-dir <CACHE_DIR>
|
|
The directory to use for HTTP caching. By default, a host-appropriate user-caching directory will be used
|
|
--collect <COLLECT>...
|
|
Control which kinds of inputs are collected for auditing [default: default] [possible values: all, default, workflows, actions, dependabot]
|
|
--strict-collection
|
|
Fail instead of warning on syntax and schema errors in collected inputs
|
|
--completions <SHELL>
|
|
Generate tab completion scripts for the specified shell [possible values: bash, elvish, fish, nushell, powershell, zsh]
|
|
--fix[=<MODE>]
|
|
Fix findings automatically, when available (EXPERIMENTAL) [possible values: safe, unsafe-only, all]
|
|
--thanks
|
|
Emit thank-you messages for zizmor's sponsors
|
|
-h, --help
|
|
Print help (see more with '--help')
|
|
-V, --version
|
|
Print version
|