Search results

Feature: consider safe contexts for github-env

enhancementNew feature or requestNew feature or request

triageIssue is being triagedIssue is being triaged

Status: Open.

#1424 In zizmorcore/zizmor;

· madrob opened on Dec 8, 2025

Perf: optimize <code>impostor-commit</code>

performance

Status: Open.

Feature

#1417 In zizmorcore/zizmor;

· woodruffw opened on Dec 8, 2025

Feature: Clarify why zizmor itself needs <code>actions: read</code> permission

enhancementNew feature or requestNew feature or request

triageIssue is being triagedIssue is being triaged

Status: Open.

#1415 In zizmorcore/zizmor;

· johnbillion opened on Dec 7, 2025

Enhancement: <code>Op::Append</code> on nested sequences

autofixAuto-fix functionalityAuto-fix functionality

enhancementNew feature or requestNew feature or request

Status: Open.

#1407 In zizmorcore/zizmor;

· omar-s-ta opened on Dec 3, 2025

New audit: detect usage of <code>npm install|ci ...</code> without <code>--ignore-scripts</code>

discussion

enhancementNew feature or requestNew feature or request

new-auditNew auditsNew audits

Status: Open.

#1405 In zizmorcore/zizmor;

· woodruffw opened on Dec 2, 2025

[Docs]: Link to GitHub docs on token permissions in excessive-permissions audit no longer has the list of permissions

documentationImprovements or additions to documentationImprovements or additions to documentation

good first issueGood for newcomersGood for newcomers

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#1359 In zizmorcore/zizmor;

· jfrost-mo opened on Nov 24, 2025

UX: Poor experience across multiple private repos

bounty:1k

cli

long-term

user-experience

Status: Open.

#1350 In zizmorcore/zizmor;

· woodruffw opened on Nov 19, 2025

New audit: detect PR creation workflows that don't use drafting

enhancementNew feature or requestNew feature or request

new-auditNew auditsNew audits

Status: Open.

#1348 In zizmorcore/zizmor;

· woodruffw opened on Nov 18, 2025

Autofixes for <code>template-injection</code> are not shell-quoting aware

autofix:unsound

bounty:1k

long-term

Status: Open.

#1346 In zizmorcore/zizmor;

· nikolay opened on Nov 18, 2025

New audit: archived action usage

enhancementNew feature or requestNew feature or request

new-auditNew auditsNew audits

Status: Open.

#1313 In zizmorcore/zizmor;

· woodruffw opened on Nov 3, 2025

[BUG]: ref-version-mismatch failed when using YAML anchor

anchors

bugSomething isn't workingSomething isn't working

long-term

Status: Open.

#1304 In zizmorcore/zizmor;

· dfunkt opened on Nov 1, 2025

Cache poisoning: additional persona/auditor sensitivities

enhancementNew feature or requestNew feature or request

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#1278 In zizmorcore/zizmor;

· woodruffw opened on Oct 23, 2025