GStars
    zizmorcore

    zizmorcore/zizmor

    Static analysis for GitHub Actions (and more)

    devops
    security
    github-actions
    security-tools
    static-analysis
    Rust
    MIT
    6.9K stars
    275 forks
    6.9K GitHub watchers
    Updated Nov 4, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    5 releases in the last 90 days, the latest 2 days ago, with 117 contributors on GitHub.

    Use Cases & Benefits

    • Performs static analysis to detect and fix security issues in CI/CD workflows, especially GitHub Actions.
    • Provides comprehensive security auditing for CI/CD pipelines, identifying vulnerabilities like template injection and credential leaks.
    • Use for securing GitHub Actions workflows by detecting excessive permissions and credential exposures.
    • Use for auditing Dependabot and pre-commit configurations to prevent accidental credential persistence.
    • Use for preventing impostor commits and confusable git references to maintain repository integrity.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    MIT

    Permissive: commercial use, modification and redistribution are allowed with attribution.

    Community files

    • README: present
    • Contributing guide: present

    Watch-outs

    No watch-outs from GStars' checks.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    zizmor is a static analysis tool for CI/CD systems.

    It can find and fix security issues in common CI/CD setups, including GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor finds:

    See zizmor's documentation for installation steps, as well as a quickstart and detailed usage recipes.

    Excerpt from the zizmorcore/zizmor README on GitHub (MIT license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Aug 20: +9

    +542 stars over 78 days across 7 snapshot days; best day +9 on Aug 20.

    Forks

    275+38

    Open issues

    179+15

    Compared with peers in DevOps

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth

    View category →
    zizmorcore/zizmor compared with DevOps repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    milind-soni/OpenMausBot13.5K+6.0K45today
    DuarteSantos8/openGym19.7K+2.4K602 days ago
    AstrBotDevs/AstrBot46.2K+1.4K655 days ago
    elie222/rakazo7.2K+9225926 days ago
    superplanehq/superplane8.8K+435607 days ago
    zizmorcore/zizmor6.9K—602 days ago
    Category median13.5K+1.4K60—
    Compare zizmor with OpenMausBot, openGym, AstrBot →

    Discover Repositories

    Search across tracked repositories by name or description