Static analysis for GitHub Actions.
zizmor is a static analysis tool for GitHub Actions.
It can find many common security issues in typical GitHub Actions CI/CD setups, including:
Sponsorship is appreciated!
Bug Fixes 🐛🔗
- Fixed a regression in 1.31.0 where some ignore comments/configurations would no longer apply to the dangerous-triggers audit (#2450)
| Publisher | William Woodruff |
|---|---|
| Version | 1.31.1 |
| Release date | 2026-10-15 |
| License | MIT |
| Installer type | zip |
| Architecture | x64 |
| Package ID | zizmor.zizmor |
Install zizmor from the command line with Windows Package Manager (winget):
winget install --id=zizmor.zizmor -e
Free and powerful security tool
Comprehensive video management for Windows
Free online vault
Top-Rated Password Manager for Personal & Business Use
Nessus Agents give you visibility into additional IT assets - even endpoints, and other remote assets that intermittently connect to the internet.
KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.
A free and reliable network scanner
An online password manager and form filler that makes web browsing easier and more secure.