zizmor

No long description provided.

Installation

dagger install github.com/typesafe-ai/daggerverse/zizmor@17d2a6c500d6886d48603b5d40a019dab6d7a892

Zizmor !

Name	Type	Default Value	Description
ctr	Container	null	Container with zizmor installed. Defaults to the official ghcr.io/zizmorcore/zizmor image.
version	String !	"1.25.2"	zizmor image tag (only used when ctr is not provided).

Example

Function Zizmor.Constructor is not accessible from the zizmor module

Function Zizmor.Constructor is not accessible from the zizmor module

Function Zizmor.Constructor is not accessible from the zizmor module

Function Zizmor.Constructor is not accessible from the zizmor module

Static analysis for GitHub Actions security.

Container with zizmor installed.

Container !

Example

Function Zizmor.ctr is not accessible from the zizmor module

Function Zizmor.ctr is not accessible from the zizmor module

Function Zizmor.ctr is not accessible from the zizmor module

Function Zizmor.ctr is not accessible from the zizmor module

Run zizmor on GitHub Actions workflow files.

Exits non-zero if findings above the configured severity are found.

String !

Name	Type	Default Value	Description
source	Directory	-	The `.github` directory containing Actions workflows.
githubToken	Secret	null	GitHub token for online audits. Without it, zizmor runs in offline mode.
format	String !	"plain"	Output format: plain, json, sarif, or github.
persona	String !	"regular"	Sensitivity level: regular, pedantic, or auditor.
minSeverity	String	null	Minimum severity to report (e.g. low, medium, high).
minConfidence	String	null	Minimum confidence to report (e.g. low, medium, high).
extraArgs	[String ! ]	null	Additional arguments to pass to zizmor.

Example

Function Zizmor.run is not accessible from the zizmor module

Function Zizmor.run is not accessible from the zizmor module

Function Zizmor.run is not accessible from the zizmor module

Function Zizmor.run is not accessible from the zizmor module