Skip to content

Pull requests: zizmorcore/zizmor

New pull request New
24 Open 1,386 Closed
24 Open 1,386 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Add --select flag to run only selected audit rules
#2081 opened May 29, 2026 by ytausch Loading…
2 tasks done
docs: set enable-cache to false for uv
#2080 opened May 29, 2026 by huang-julien Loading…
2 tasks done
1
1
feat(adhoc-packages): Implement an adhoc-packages rule for banning gem install pkg and npm install pkg commands. enhancement New feature or request new-audit New audits
#2061 opened May 24, 2026 by connorshea Loading…
2 tasks done
1.26.0
1
15
feat(shellcheck): add shellcheck wrapper audit rule
#2029 opened May 18, 2026 by guillp • Draft
2 tasks done
2
feat(excessive-permissions): add conservative auto-fix for overly broad permissions
#1963 opened May 1, 2026 by vmvarela • Draft
1
Reproducer for #1914 bugfix Fixes a known bug
#1927 opened Apr 18, 2026 by woodruffw Member • Draft
secrets-outside-env: flag secrets in reusable workflow calls enhancement New feature or request
#1792 opened Mar 24, 2026 by woodruffw Member Loading…
@woodruffw
1
fix(github-format): preserve path
#1748 opened Mar 11, 2026 by reubenwong97 Contributor Loading…
1 of 2 tasks
1
9
feat(unpinned-images): Docker CLI models with clap
#1711 opened Mar 6, 2026 by jfagoagas Loading…
4 tasks done
6
Update --quiet flag and introduce --silent flag
#1696 opened Mar 4, 2026 by my1e5 Loading…
2 tasks done
1
5
feat(unpinned-images): detect docker/podman commands in run: steps
#1677 opened Mar 1, 2026 by jfagoagas Loading…
2 of 7 tasks
1
31
feat(config): use toml for configuring zizmor
#1666 opened Feb 26, 2026 by reubenwong97 Contributor • Draft
1 of 2 tasks
2
feat: new audit: agentic-actions (#1605)
#1655 opened Feb 23, 2026 by BuffaloWill Loading…
2 tasks done
1
22
Flag missing concurrency when all jobs are reusable
#1621 opened Feb 15, 2026 by woodruffw Member • Draft
1
@woodruffw
Flag issue_comment as a dangerous trigger
#1614 opened Feb 12, 2026 by dguido Contributor Loading…
10 tasks done
1
2
Detect and report GitHub API rate limiting
#1609 opened Feb 12, 2026 by dguido Contributor Loading…
6 tasks done
1
17
fix: Deduplicate findings due to anchors bugfix Fixes a known bug
#1584 opened Jan 30, 2026 by DarkaMaul Contributor Loading…
2 tasks done
9
feat(uses): add glob pattern support for repository matching config Configuration functionality enhancement New feature or request
#1559 opened Jan 22, 2026 by ryandelano Loading…
1 of 2 tasks
1.26.0
28
Check for timeout-minutes in jobs and steps
#1347 opened Nov 18, 2025 by joewallwork Contributor Loading…
1 of 2 tasks
1
2
feat: begin adding docker image uses patterns enhancement New feature or request
#1151 opened Sep 14, 2025 by woodruffw Member Loading…
@woodruffw
6
Feature: Require or recommend the timeout-minutes property for all jobs #1023 enhancement New feature or request new-audit New audits
#1067 opened Aug 10, 2025 by EmmanuelBerkowicz Loading…
8
Fix Remove operation for flow mappings and sequences autofix Auto-fix functionality enhancement New feature or request
#1020 opened Jul 10, 2025 by mostafa Contributor Loading…
6
fix: treat empty config path as unset bugfix Fixes a known bug triage Issue is being triaged
#1010 opened Jul 3, 2025 by iainlane Loading…
5
refactor: simplify and correct Remove op autofix Auto-fix functionality refactor Refactoring tasks
#1000 opened Jul 1, 2025 by woodruffw Member • Draft
@woodruffw
2
ProTip! Find all pull requests that aren't related to any open issues with -linked:issue.