static analysis tool for GitHub Actions
Project homepage: https://docs.zizmor.sh/
Description
zizmor is a static analysis tool for GitHub Actions.
It can find many common issues in typical GitHub Actions CI/CD setups,
including:
* Template injection vulnerabilities, leading to attacker-controlled
code execution
* Accidental credential persistence and leakage
* Excessive permission scopes and credential grants to runners
* Impostor commits and confusable git references
Package information
- Ports path
- devel/zizmor
- Package architecture
- amd64
- Maintainer
- Theo Buehler <tb@openbsd.org>
- Categories
- devel, lang/rust
- Available flavors
- None listed
- Only for architectures
- aarch64, amd64, arm, i386, mips64, mips64el, powerpc, powerpc64, riscv64, sparc64, alpha, hppa
Ports list build and test dependencies as well as runtime dependencies. pkg_add selects those needed for installation.
Direct dependencies
Build
- devel/cargo-generate-vendor STEM->=1.1
- lang/rust