zizmor 1.12.1__py3-none-win32.whl → 1.14.0__py3-none-win32.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of zizmor might be problematic. Click here for more details.
- {zizmor-1.12.1.data → zizmor-1.14.0.data}/scripts/zizmor.exe +0 -0
- zizmor-1.14.0.dist-info/METADATA +128 -0
- zizmor-1.14.0.dist-info/RECORD +5 -0
- {zizmor-1.12.1.dist-info → zizmor-1.14.0.dist-info}/WHEEL +1 -1
- zizmor-1.12.1.dist-info/METADATA +0 -6
- zizmor-1.12.1.dist-info/RECORD +0 -5
- {zizmor-1.12.1.dist-info → zizmor-1.14.0.dist-info}/licenses/LICENSE +0 -0
|
Binary file
|
|
@@ -0,0 +1,128 @@
|
|
|
1
|
+
Metadata-Version: 2.4
|
|
2
|
+
Name: zizmor
|
|
3
|
+
Version: 1.14.0
|
|
4
|
+
License-File: LICENSE
|
|
5
|
+
Home-Page: https://docs.zizmor.sh
|
|
6
|
+
Requires-Python: >=3.9
|
|
7
|
+
Description-Content-Type: text/markdown; charset=UTF-8; variant=GFM
|
|
8
|
+
|
|
9
|
+
# 🌈 zizmor
|
|
10
|
+
|
|
11
|
+
[](https://zizmor.sh/)
|
|
12
|
+
[](https://github.com/zizmorcore/zizmor/actions/workflows/ci.yml)
|
|
13
|
+
[](https://crates.io/crates/zizmor)
|
|
14
|
+
[](https://repology.org/project/zizmor/versions)
|
|
15
|
+
[](https://github.com/sponsors/woodruffw)
|
|
16
|
+
[](https://discord.com/invite/PGU3zGZuGG)
|
|
17
|
+
|
|
18
|
+
`zizmor` is a static analysis tool for GitHub Actions.
|
|
19
|
+
|
|
20
|
+
It can find many common security issues in typical GitHub Actions CI/CD setups,
|
|
21
|
+
including:
|
|
22
|
+
|
|
23
|
+
* Template injection vulnerabilities, leading to attacker-controlled code execution
|
|
24
|
+
* Accidental credential persistence and leakage
|
|
25
|
+
* Excessive permission scopes and credential grants to runners
|
|
26
|
+
* Impostor commits and confusable `git` references
|
|
27
|
+
* ...[and much more]!
|
|
28
|
+
|
|
29
|
+
[and much more]: https://docs.zizmor.sh/audits/
|
|
30
|
+
|
|
31
|
+

|
|
32
|
+
|
|
33
|
+
See [`zizmor`'s documentation](https://docs.zizmor.sh/)
|
|
34
|
+
for [installation steps], as well as a [quickstart] and
|
|
35
|
+
[detailed usage recipes].
|
|
36
|
+
|
|
37
|
+
[please file them]: https://github.com/zizmorcore/zizmor/issues/new?assignees=&labels=bug%2Ctriage&projects=&template=bug-report.yml&title=%5BBUG%5D%3A+
|
|
38
|
+
|
|
39
|
+
[installation steps]: https://docs.zizmor.sh/installation/
|
|
40
|
+
|
|
41
|
+
[quickstart]: https://docs.zizmor.sh/quickstart/
|
|
42
|
+
|
|
43
|
+
[detailed usage recipes]: https://docs.zizmor.sh/usage/
|
|
44
|
+
|
|
45
|
+
## License
|
|
46
|
+
|
|
47
|
+
`zizmor` is licensed under the [MIT License](./LICENSE).
|
|
48
|
+
|
|
49
|
+
## Contributing
|
|
50
|
+
|
|
51
|
+
See [our contributing guide!](./CONTRIBUTING.md)
|
|
52
|
+
|
|
53
|
+
## The name?
|
|
54
|
+
|
|
55
|
+
*[Now you can have beautiful clean workflows!]*
|
|
56
|
+
|
|
57
|
+
[Now you can have beautiful clean workflows!]: https://www.youtube.com/watch?v=ol7rxFCvpy8
|
|
58
|
+
|
|
59
|
+
## Sponsors 💖
|
|
60
|
+
|
|
61
|
+
`zizmor`'s development is supported by these amazing sponsors!
|
|
62
|
+
|
|
63
|
+
<!-- @@begin-sponsors@@ -->
|
|
64
|
+
<table width="100%">
|
|
65
|
+
<caption>Logo-level sponsors</caption>
|
|
66
|
+
<tbody>
|
|
67
|
+
<tr>
|
|
68
|
+
<td align="center" valign="top" width="15%">
|
|
69
|
+
<a href="https://grafana.com/">
|
|
70
|
+
<img src="https://avatars.githubusercontent.com/u/7195757?s=100&v=4" width="100px">
|
|
71
|
+
<br>
|
|
72
|
+
Grafana Labs
|
|
73
|
+
</a>
|
|
74
|
+
</td>
|
|
75
|
+
<td align="center" valign="top" width="15%">
|
|
76
|
+
<a href="https://trailofbits.com/">
|
|
77
|
+
<img src="https://avatars.githubusercontent.com/u/2314423?s=100&v=4" width="100px">
|
|
78
|
+
<br>
|
|
79
|
+
Trail of Bits
|
|
80
|
+
</a>
|
|
81
|
+
</td>
|
|
82
|
+
<td align="center" valign="top" width="15%">
|
|
83
|
+
<a href="https://www.shipfox.io">
|
|
84
|
+
<img src="https://avatars.githubusercontent.com/u/163036520?s=100&v=4" width="100px">
|
|
85
|
+
<br>
|
|
86
|
+
Shipfox
|
|
87
|
+
</a>
|
|
88
|
+
</td>
|
|
89
|
+
</tr>
|
|
90
|
+
</tbody>
|
|
91
|
+
</table>
|
|
92
|
+
<hr align="center">
|
|
93
|
+
<table width="100%">
|
|
94
|
+
<caption>Name-level sponsors</caption>
|
|
95
|
+
<tbody>
|
|
96
|
+
<tr>
|
|
97
|
+
<td align="center" valign="top">
|
|
98
|
+
<a href="http://tenki.cloud/">
|
|
99
|
+
Tenki Cloud
|
|
100
|
+
</a>
|
|
101
|
+
</td>
|
|
102
|
+
<td align="center" valign="top">
|
|
103
|
+
<a href="https://github.com/ariccio">
|
|
104
|
+
Alexander Riccio
|
|
105
|
+
</a>
|
|
106
|
+
</td>
|
|
107
|
+
</tr>
|
|
108
|
+
</tbody>
|
|
109
|
+
</table>
|
|
110
|
+
<!-- @@end-sponsors@@ -->
|
|
111
|
+
|
|
112
|
+
Want to see your name or logo above? Consider becoming a sponsor
|
|
113
|
+
through one of the following:
|
|
114
|
+
|
|
115
|
+
- [GitHub Sponsors](https://github.com/sponsors/woodruffw) (preferred)
|
|
116
|
+
- [thanks.dev](https://thanks.dev/u/gh/woodruffw)
|
|
117
|
+
- [ko-fi](https://ko-fi.com/woodruffw)
|
|
118
|
+
|
|
119
|
+
## Star History
|
|
120
|
+
|
|
121
|
+
<a href="https://star-history.com/#zizmorcore/zizmor&Date">
|
|
122
|
+
<picture>
|
|
123
|
+
<source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=zizmorcore/zizmor&type=Date&theme=dark" />
|
|
124
|
+
<source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=zizmorcore/zizmor&type=Date" />
|
|
125
|
+
<img alt="Star History Chart" src="https://api.star-history.com/svg?repos=zizmorcore/zizmor&type=Date" />
|
|
126
|
+
</picture>
|
|
127
|
+
</a>
|
|
128
|
+
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
zizmor-1.14.0.data/scripts/zizmor.exe,sha256=rersxLV9EIpYwZNb-NLVEDGl4KWDsPmbdPCBsB9jAc4,14743040
|
|
2
|
+
zizmor-1.14.0.dist-info/METADATA,sha256=rgENoFktSw2e9Q9w4orJEr5ki-KBIsFkq6SLQU-tGy8,4217
|
|
3
|
+
zizmor-1.14.0.dist-info/WHEEL,sha256=uT4IaxTLAwDsS7H6Z9jQmlZsLccZQ2CCUpoUS6OYuwI,89
|
|
4
|
+
zizmor-1.14.0.dist-info/licenses/LICENSE,sha256=_c7xNtTB0tlCnR_fBwfebjU7Ca3MqJaG2Tv1UWo1pGA,1130
|
|
5
|
+
zizmor-1.14.0.dist-info/RECORD,,
|
zizmor-1.12.1.dist-info/METADATA
DELETED
zizmor-1.12.1.dist-info/RECORD
DELETED
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
zizmor-1.12.1.data/scripts/zizmor.exe,sha256=XQFlCF4CDQEBEJGUn8kdnVuH3l3gWhUR7QtTutM9GpU,14901760
|
|
2
|
-
zizmor-1.12.1.dist-info/METADATA,sha256=9d0foRgIiYnzOHNEoKzRehlQPvvyf883n5_74q1c0dI,130
|
|
3
|
-
zizmor-1.12.1.dist-info/WHEEL,sha256=Q4EuPurnoomImVpjwa0YbplsthbqY-uCz1VRFQ9bQ98,89
|
|
4
|
-
zizmor-1.12.1.dist-info/licenses/LICENSE,sha256=_c7xNtTB0tlCnR_fBwfebjU7Ca3MqJaG2Tv1UWo1pGA,1130
|
|
5
|
-
zizmor-1.12.1.dist-info/RECORD,,
|
|
File without changes
|