zizmor
Static analysis for GitHub Actions
Tool github-actions security security-tools
Minimal
Install package
Latest min add zizmor - Source archive SHA256
- 4a037cd9…893b
- Spec hash
- 8a039522…ff92
- Target
- amd64/linux
- Needs network
- No
- Closed source
- No
What is zizmor?
Static analysis for GitHub Actions
How to use this package
Quick install
Installs the package into the current environment for this session. Use --build or --runtime to persist it as a build-time or runtime dependency.
min add zizmorDeclare as a task dependency in minimal.toml
Listing the package under tasks.<name>.packages makes it available inside that task’s sandbox.
[tasks.dev]
packages = ["zizmor"]Build-time vs runtime
Choose build-time for tools needed during compilation, runtime for dynamic libraries loaded at runtime.
min add --build zizmor
min add --runtime zizmor