ZIP
WinGet
zizmor
William Woodruff · 1.24.0 · x64
Before deploying, verify this file with VirusTotal ↗
Silent Commands
Distributed as a ZIP archive — extract the contents and run the executable directly. No installer is included.
File Identity
Filename
zizmor-x86_64-pc-windows-msvc.zip
Signature
Status
Upload installer to verify signature
Installer Selection
WinGet Package
Package ID
zizmor.zizmor
Version
1.24.0
Description
Static analysis for GitHub Actions.
License
MIT
↗
Homepage
https://zizmor.sh/
Installer URL
https://github.com/zizmorcore/zizmor/releases/download/v1.24.0/zizmor-x86_64-pc-windows-msvc.zip
Upgrade Behavior
install(Install over existing)
Release Notes
New Features 🌈🔗
- zizmor now allows users to audit from stdin, by passing zizmor - (#1611)
Enhancements 🌱🔗
- The use-trusted-publishing audit now detects bun publish and bunx npm publish patterns (#1737)
Many thanks to @shaanmajid for proposing and implementing this improvement!
- zizmor's CLI help and usage output now uses a custom color scheme for improved readability (#1747)
- The secrets-outside-env audit is now configurable with an allowlist of secret names that should not be flagged, ev…