mirror of
https://github.com/zizmorcore/zizmor.git
synced 2025-12-23 08:47:33 +00:00
Static analysis for GitHub Actions
http://docs.zizmor.sh/
...this will be useful when building accurate spans. Signed-off-by: William Woodruff <william@yossarian.net> |
||
|---|---|---|
| src | ||
| .gitignore | ||
| Cargo.lock | ||
| Cargo.toml | ||
| README.md | ||
zizmor
A tool for finding security issues in GitHub Actions CI/CD setups.
At the moment, zizmor only supports workflow definitions, and only
detects a small subset of known issues. See the roadmap
for details on our plans.
Usage
cargo build
./target/debug/zizmor --help