zizmor 1.7.0__tar.gz → 1.8.0rc2__tar.gz

{zizmor-1.7.0 → zizmor-1.8.0rc2}/Cargo.lock

@@ -315,9 +315,9 @@ checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
 
 [[package]]
 name = "clap"
-version = "4.5.37"
+version = "4.5.38"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eccb054f56cbd38340b380d4a8e69ef1f02f1af43db2f0cc817a4774d80ae071"
+checksum = "ed93b9805f8ba930df42c2590f05453d5ec36cbb85d018868a5b24d31f6ac000"
 dependencies = [
  "clap_builder",
  "clap_derive",
@@ -335,9 +335,9 @@ dependencies = [
 
 [[package]]
 name = "clap_builder"
-version = "4.5.37"
+version = "4.5.38"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "efd9466fac8543255d3b1fcad4762c5e116ffe808c8a3043d4263cd4fd4862a2"
+checksum = "379026ff283facf611b0ea629334361c4211d1b12ee01024eec1591133b04120"
 dependencies = [
  "anstream",
  "anstyle",
@@ -747,11 +747,20 @@ version = "0.31.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "07e28edb80900c19c28f1072f2e8aeca7fa06b23cd4169cefe1af5aa3260783f"
 
+[[package]]
+name = "github-actions-expressions"
+version = "0.0.3"
+dependencies = [
+ "anyhow",
+ "itertools",
+ "pest",
+ "pest_derive",
+ "pretty_assertions",
+]
+
 [[package]]
 name = "github-actions-models"
-version = "0.28.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "90f4e09b721ac4c2c4af87cbdeac88fff82284dbcf71702066eecc17c3717dff"
+version = "0.28.3"
 dependencies = [
  "indexmap",
  "serde",
@@ -1533,9 +1542,9 @@ checksum = "b15813163c1d831bf4a13c3610c05c0d03b39feb07f7e09fa234dac9b15aaf39"
 
 [[package]]
 name = "owo-colors"
-version = "4.2.0"
+version = "4.2.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1036865bb9422d3300cf723f657c2851d0e9ab12567854b1f4eba3d77decf564"
+checksum = "26995317201fa17f3656c36716aed4a7c81743a9634ac4c99c0eeda495db0cec"
 
 [[package]]
 name = "parking_lot"
@@ -2103,9 +2112,9 @@ dependencies = [
 
 [[package]]
 name = "serde-sarif"
-version = "0.7.0"
+version = "0.8.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b39432f20e354de863582451c54bac03ffa63f7dd77f8b1e0ddee211950ab2a2"
+checksum = "a053c46f18a8043570d4e32fefc4c6377f82bf29ec310a33e93f273048e3b0be"
 dependencies = [
  "anyhow",
  "prettyplease",
@@ -2345,15 +2354,15 @@ checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
 
 [[package]]
 name = "strum"
-version = "0.26.3"
+version = "0.27.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8fec0f0aef304996cf250b31b5a10dee7980c85da9d759361292b8bca5a18f06"
+checksum = "f64def088c51c9510a8579e3c5d67c65349dcf755e5479ad3d010aa6454e2c32"
 
 [[package]]
 name = "strum_macros"
-version = "0.26.4"
+version = "0.27.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4c6bee85a5a24955dc440386795aa378cd9cf82acd5f764469152d2270e581be"
+checksum = "c77a8c5abcaf0f9ce05d62342b7d298c346515365c36b673df4ebe3ced01fde8"
 dependencies = [
  "heck",
  "proc-macro2",
@@ -2560,9 +2569,9 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
 
 [[package]]
 name = "tokio"
-version = "1.44.2"
+version = "1.45.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e6b88822cbe49de4185e3a4cbf8321dd487cf5fe0c5c65695fef6346371e9c48"
+checksum = "2513ca694ef9ede0fb23fe71a4ee4107cb102b9dc1930f6d0fd77aae068ae165"
 dependencies = [
  "backtrace",
  "bytes",
@@ -2748,9 +2757,9 @@ dependencies = [
 
 [[package]]
 name = "tree-sitter"
-version = "0.25.3"
+version = "0.25.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b9ac5ea5e7f2f1700842ec071401010b9c59bf735295f6e9fa079c3dc035b167"
+checksum = "69aff09fea9a41fb061ae6b206cb87cac1b8db07df31be3ba271fbc26760f213"
 dependencies = [
  "cc",
  "regex",
@@ -2804,18 +2813,18 @@ checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
 
 [[package]]
 name = "typed-builder"
-version = "0.20.1"
+version = "0.21.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cd9d30e3a08026c78f246b173243cf07b3696d274debd26680773b6773c2afc7"
+checksum = "ce63bcaf7e9806c206f7d7b9c1f38e0dce8bb165a80af0898161058b19248534"
 dependencies = [
  "typed-builder-macro",
 ]
 
 [[package]]
 name = "typed-builder-macro"
-version = "0.20.1"
+version = "0.21.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3c36781cc0e46a83726d9879608e4cf6c2505237e263a8eb8c24502989cfdb28"
+checksum = "60d8d828da2a3d759d3519cdf29a5bac49c77d039ad36d0782edadbf9cd5415b"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -3455,10 +3464,10 @@ checksum = "fdd20c5420375476fbd4394763288da7eb0cc0b8c11deed431a91562af7335d3"
 
 [[package]]
 name = "yamlpath"
-version = "0.16.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "87c585ad15cb2a723978a39719af264133486ee68bd980e214ff43402e7b674a"
+version = "0.18.0"
 dependencies = [
+ "serde",
+ "serde_yaml",
  "thiserror 2.0.12",
  "tree-sitter",
  "tree-sitter-yaml",
@@ -3585,7 +3594,7 @@ dependencies = [
 
 [[package]]
 name = "zizmor"
-version = "1.7.0"
+version = "1.8.0-rc2"
 dependencies = [
  "annotate-snippets",
  "anstream",
@@ -3597,6 +3606,7 @@ dependencies = [
  "clap_complete",
  "etcetera",
  "flate2",
+ "github-actions-expressions",
  "github-actions-models",
  "http-cache-reqwest",
  "human-panic",
@@ -3608,9 +3618,6 @@ dependencies = [
  "jsonschema",
  "line-index",
  "owo-colors",
- "pest",
- "pest_derive",
- "pretty_assertions",
  "regex",
  "reqwest",
  "reqwest-middleware",

zizmor-1.8.0rc2/Cargo.toml

@@ -0,0 +1,64 @@
+[workspace]
+resolver = "2"
+members = ["crates/zizmor"]
+
+[workspace.package]
+authors = ["William Woodruff <william@yossarian.net>"]
+readme = "README.md"
+homepage = "https://docs.zizmor.sh"
+edition = "2024"
+license = "MIT"
+
+[workspace.dependencies]
+anyhow = "1.0.98"
+github-actions-expressions = { path = "crates/github-actions-expressions", version = "0.0.3" }
+github-actions-models = { path = "crates/github-actions-models", version = "0.28.3" }
+itertools = "0.14.0"
+pest = "2.8.0"
+pest_derive = "2.8.0"
+pretty_assertions = "1.4.1"
+annotate-snippets = "0.11.5"
+anstream = "0.6.18"
+assert_cmd = "2.0.17"
+camino = "1.1.9"
+clap = "4.5.38"
+clap-verbosity-flag = { version = "3.0.2", default-features = false }
+clap_complete = "4.5.50"
+etcetera = "0.10.0"
+flate2 = "1.1.1"
+http-cache-reqwest = "0.15.1"
+human-panic = "2.0.1"
+ignore = "0.4.23"
+indexmap = { version = "2.9.0", features = ["serde"] }
+indicatif = "0.17.11"
+insta = "1.43.0"
+jsonschema = "0.30.0"
+line-index = "0.1.2"
+owo-colors = "4.2.1"
+regex = "1.11.1"
+reqwest = { version = "0.12.15", default-features = false }
+reqwest-middleware = "0.4.2"
+serde = { version = "1.0.219", features = ["derive"] }
+serde-sarif = "0.8.0"
+serde_json = "1.0.140"
+serde_json_path = "0.7.2"
+serde_yaml = "0.9.34"
+tar = "0.4.44"
+terminal-link = "0.1.0"
+thiserror = "2.0.12"
+tokio = "1.45.0"
+tracing = "0.1.41"
+tracing-indicatif = "0.3.9"
+tracing-subscriber = "0.3.19"
+tree-sitter = "0.25.4"
+tree-sitter-bash = "0.23.3"
+tree-sitter-powershell = "0.25.2"
+yamlpath = { path = "crates/yamlpath", version = "0.18.0" }
+tree-sitter-yaml = "0.7.0"
+
+
+[profile.dev.package]
+insta.opt-level = 3
+
+[profile.release]
+lto = true

{zizmor-1.7.0 → zizmor-1.8.0rc2}/PKG-INFO

@@ -1,20 +1,20 @@
 Metadata-Version: 2.4
 Name: zizmor
-Version: 1.7.0
+Version: 1.8.0rc2
 License-File: LICENSE
 Summary: Static analysis for GitHub Actions
 Keywords: cli,github-actions,static-analysis,security
-Home-Page: https://github.com/woodruffw/zizmor
+Home-Page: https://docs.zizmor.sh
 Author: William Woodruff <william@yossarian.net>
 Author-email: William Woodruff <william@yossarian.net>
 License: MIT
 Requires-Python: >=3.9
 Description-Content-Type: text/markdown; charset=UTF-8; variant=GFM
-Project-URL: Source Code, https://github.com/woodruffw/zizmor
+Project-URL: Source Code, https://github.com/zizmorcore/zizmor
 
 # 🌈 zizmor
 
-[![CI](https://github.com/woodruffw/zizmor/actions/workflows/ci.yml/badge.svg)](https://github.com/woodruffw/zizmor/actions/workflows/ci.yml)
+[![CI](https://github.com/zizmorcore/zizmor/actions/workflows/ci.yml/badge.svg)](https://github.com/zizmorcore/zizmor/actions/workflows/ci.yml)
 [![Crates.io](https://img.shields.io/crates/v/zizmor)](https://crates.io/crates/zizmor)
 [![Packaging status](https://repology.org/badge/tiny-repos/zizmor.svg)](https://repology.org/project/zizmor/versions)
 [![GitHub Sponsors](https://img.shields.io/github/sponsors/woodruffw?style=flat&logo=githubsponsors&labelColor=white&color=white)](https://github.com/sponsors/woodruffw)
@@ -31,21 +31,21 @@ including:
 * Impostor commits and confusable `git` references
 * ...[and much more]!
 
-[and much more]: https://woodruffw.github.io/zizmor/audits/
+[and much more]: https://docs.zizmor.sh/audits/
 
-![zizmor demo](https://raw.githubusercontent.com/woodruffw/zizmor/main/docs/assets/zizmor-demo.gif)
+![zizmor demo](https://raw.githubusercontent.com/zizmorcore/zizmor/main/docs/assets/zizmor-demo.gif)
 
-See [`zizmor`'s documentation](https://woodruffw.github.io/zizmor/)
+See [`zizmor`'s documentation](https://docs.zizmor.sh/)
 for [installation steps], as well as a [quickstart] and
 [detailed usage recipes].
 
-[please file them]: https://github.com/woodruffw/zizmor/issues/new?assignees=&labels=bug%2Ctriage&projects=&template=bug-report.yml&title=%5BBUG%5D%3A+
+[please file them]: https://github.com/zizmorcore/zizmor/issues/new?assignees=&labels=bug%2Ctriage&projects=&template=bug-report.yml&title=%5BBUG%5D%3A+
 
-[installation steps]: https://woodruffw.github.io/zizmor/installation/
+[installation steps]: https://docs.zizmor.sh/installation/
 
-[quickstart]: https://woodruffw.github.io/zizmor/quickstart/
+[quickstart]: https://docs.zizmor.sh/quickstart/
 
-[detailed usage recipes]: https://woodruffw.github.io/zizmor/usage/
+[detailed usage recipes]: https://docs.zizmor.sh/usage/
 
 ## License
 
@@ -83,11 +83,11 @@ Astral
 
 ## Star History
 
-<a href="https://star-history.com/#woodruffw/zizmor&Date">
+<a href="https://star-history.com/#zizmorcore/zizmor&Date">
  <picture>
-   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=woodruffw/zizmor&type=Date&theme=dark" />
-   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=woodruffw/zizmor&type=Date" />
-   <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=woodruffw/zizmor&type=Date" />
+   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=zizmorcore/zizmor&type=Date&theme=dark" />
+   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=zizmorcore/zizmor&type=Date" />
+   <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=zizmorcore/zizmor&type=Date" />
  </picture>
 </a>
 

zizmor-1.8.0rc2/crates/github-actions-expressions/Cargo.toml

@@ -0,0 +1,20 @@
+[package]
+name = "github-actions-expressions"
+description = "GitHub Actions expression parser and data types"
+repository = "https://github.com/zizmorcore/zizmor/tree/main/crates/github-actions-expressions"
+version = "0.0.3"
+readme = "README.md"
+
+homepage.workspace = true
+license.workspace = true
+authors.workspace = true
+edition.workspace = true
+
+[dependencies]
+anyhow.workspace = true
+pest.workspace = true
+pest_derive.workspace = true
+itertools.workspace = true
+
+[dev-dependencies]
+pretty_assertions.workspace = true

zizmor-1.8.0rc2/crates/github-actions-expressions/README.md

@@ -0,0 +1,16 @@
+# github-actions-expressions
+
+[![CI](https://github.com/zizmorcore/zizmor/actions/workflows/ci.yml/badge.svg)](https://github.com/zizmorcore/zizmor/actions/workflows/ci.yml)
+[![Crates.io](https://img.shields.io/crates/v/github-actions-expressions)](https://crates.io/crates/github-actions-expressions)
+[![docs.rs](https://img.shields.io/docsrs/github-actions-expressions)](https://docs.rs/github-actions-expressions)
+[![GitHub Sponsors](https://img.shields.io/github/sponsors/woodruffw?style=flat&logo=githubsponsors&labelColor=white&color=white)](https://github.com/sponsors/woodruffw)
+[![Discord](https://img.shields.io/badge/Discord-%235865F2.svg?logo=discord&logoColor=white)](https://discord.com/invite/PGU3zGZuGG)
+
+`github-actions-expressions` is a parser and library for GitHub Actions expressions.
+
+See the [documentation] for more details.
+
+This library is part of [zizmor].
+
+[documentation]: https://docs.rs/github-actions-expressions
+[zizmor]: https://docs.zizmor.sh