Skip to content

Pull requests: zizmorcore/zizmor

New pull request New
24 Open 1,499 Closed
24 Open 1,499 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Try to use Slug APIs more consistently internal refactor Refactoring tasks
#2261 opened Aug 2, 2026 by woodruffw Member • Draft
@woodruffw
Suggest tags belonging to the action being used bugfix Fixes a known bug
#2247 opened Jul 28, 2026 by potiuk Contributor Loading…
2 tasks done
1.30.0
1
4
Support audit ID aliasing
#2233 opened Jul 24, 2026 by woodruffw Member • Draft
feat: add timeout-minutes audit enhancement New feature or request new-audit New audits
#2166 opened Jul 5, 2026 by mchevestrier Loading…
1 of 2 tasks
1.30.0
1
7
Fix on.workflow_call.secrets: inherit deserialization and flag it in secrets-inherit
#2159 opened Jun 29, 2026 by david-wagih Contributor Loading…
2 tasks done
1.30.0
1
9
feat: Include bundle add, yarn add, and pnpm add in banned commands for the adhoc-packages rule.
#2141 opened Jun 22, 2026 by connorshea Contributor Loading…
1 of 2 tasks
1.30.0
@woodruffw
3
Foundation for a better 'self-hosted' check refactor Refactoring tasks
#2140 opened Jun 22, 2026 by woodruffw Member • Draft
@woodruffw
5
fix(config): treat empty or comment-only config files as valid bugfix Fixes a known bug config Configuration functionality
#2108 opened Jun 8, 2026 by serval-frenchie Loading…
2 tasks done
1
8
Add --select flag to run only selected audit rules
#2081 opened May 29, 2026 by ytausch Loading…
2 tasks done
1.30.0
2
feat(excessive-permissions): add conservative auto-fix for overly broad permissions
#1963 opened May 1, 2026 by vmvarela • Draft
1
Reproducer for #1914 bugfix Fixes a known bug
#1927 opened Apr 18, 2026 by woodruffw Member • Draft
secrets-outside-env: flag secrets in reusable workflow calls enhancement New feature or request
#1792 opened Mar 24, 2026 by woodruffw Member Loading…
@woodruffw
1
feat(unpinned-images): Docker CLI models with clap
#1711 opened Mar 6, 2026 by jfagoagas Loading…
4 tasks done
6
Update --quiet flag and introduce --silent flag
#1696 opened Mar 4, 2026 by my1e5 Loading…
2 tasks done
1
5
feat(unpinned-images): detect docker/podman commands in run: steps
#1677 opened Mar 1, 2026 by jfagoagas Loading…
2 of 7 tasks
1
31
feat(config): use toml for configuring zizmor
#1666 opened Feb 26, 2026 by reubenwong97 Contributor • Draft
1 of 2 tasks
2
feat: new audit: agentic-actions (#1605)
#1655 opened Feb 23, 2026 by BuffaloWill Loading…
2 tasks done
1
22
Flag missing concurrency when all jobs are reusable
#1621 opened Feb 15, 2026 by woodruffw Member • Draft
1
@woodruffw
Flag issue_comment as a dangerous trigger
#1614 opened Feb 12, 2026 by dguido Contributor Loading…
10 tasks done
1
2
Detect and report GitHub API rate limiting
#1609 opened Feb 12, 2026 by dguido Contributor Loading…
6 tasks done
1
17
fix: Deduplicate findings due to anchors bugfix Fixes a known bug
#1584 opened Jan 30, 2026 by DarkaMaul Contributor Loading…
2 tasks done
9
feat(uses): add glob pattern support for repository matching config Configuration functionality enhancement New feature or request
#1559 opened Jan 22, 2026 by ryandelano Loading…
1 of 2 tasks
1.30.0
28
feat: begin adding docker image uses patterns enhancement New feature or request
#1151 opened Sep 14, 2025 by woodruffw Member Loading…
@woodruffw
6
fix: treat empty config path as unset bugfix Fixes a known bug triage Issue is being triaged
#1010 opened Jul 3, 2025 by iainlane Loading…
5
ProTip! Exclude everything labeled bug with -label:bug.