zizmor
Static analysis for GitHub Actions workflows, detecting insecure CI/CD patterns such as excessive token permissions, template injection risks, credential persistence, and unsafe workflow references.
- from
- Static Analysis & Code Quality
- added
- 2026-10-10
- likes
- 0
similar
-
zizmorcore/zizmor github.com
[zizmor] - Static analysis tool for GitHub Actions that finds security issues including template injection, credential leakage, excessive permissions, and impostor commits.
-
zarn github.com
A lightweight static security analysis tool for modern Perl Apps
-
Vulnerable GitHub Actions Workflows Part 1: Privilege Escalation Inside Your CI/CD Pipeline legitsecurity.com
GitHub Actions workflow_run PE.
-
modesty github.com
-
passion github.com
-
bridgecrewio/checkov :fire::fire::fire::fire::fire: github.com
Static analysis for infrastructure as code manifests (Terraform, Kubernetes, Cloudformation, Helm, Dockerfile, Kustomize) find security misconfiguration and fix them.
Static Analysis & Code Quality › Other: “Static analysis for GitHub Actions workflows, detecting insecure CI/CD patterns such as excessive token permissions, template injection risks, credential persistence, and unsafe workflow references.”