Show HN: Zizmor, static analysis for GitHub Actions

Hello, and welcome to zizmor's documentation!

zizmor is a static analysis tool for GitHub Actions. It can find many common security issues in typical GitHub Actions CI/CD setups.

Go right to our Installation Steps, and then to Quickstart or Usage Recipes to learn more about how to use zizmor locally or in your CI/CD.

Sponsors 💖🔗

zizmor's development is supported by these amazing sponsors!

Logo-level sponsors

Astral

Grafana Labs

Trail of Bits

---

Name-level sponsors

Tenki Cloud