Search results

Feature: green software practices

enhancementNew feature or requestNew feature or request

Status: Open.

#1225 In zizmorcore/zizmor;

· jwallwork23 opened on Oct 9, 2025

CLI: refactor <code>--collect</code>

cli

Status: Open.

Feature

#1224 In zizmorcore/zizmor;

· woodruffw opened on Oct 8, 2025

New audit: Dependabot <code>registries</code> can contain secrets in URLs/the <code>password</code> field

enhancementNew feature or requestNew feature or request

new-auditNew auditsNew audits

Status: Open.

Feature

#1222 In zizmorcore/zizmor;

· woodruffw opened on Oct 7, 2025

Feature: support auditing workflow/action definitions embedded in pages?

enhancementNew feature or requestNew feature or request

Status: Open.

#1209 In zizmorcore/zizmor;

· woodruffw opened on Oct 3, 2025

New audit: detect <code>upload-artifact</code> without <code>if-no-files-found: error</code>

enhancementNew feature or requestNew feature or request

new-auditNew auditsNew audits

Status: Open.

#1208 In zizmorcore/zizmor;

· woodruffw opened on Oct 3, 2025

Feature: use-trusted-publishing could be more precise on crates.io/cargo publish

enhancementNew feature or requestNew feature or request

Status: Open.

#1206 In zizmorcore/zizmor;

· woodruffw opened on Oct 1, 2025

[BUG]: Does not return exit code 0 even if all findings are auto-fixable

bugSomething isn't workingSomething isn't working

triageIssue is being triagedIssue is being triaged

Status: Open.

#1189 In zizmorcore/zizmor;

· daniel-shuy opened on Sep 27, 2025

Feature: Add support for NuGet to use-trusted-publishing

enhancementNew feature or requestNew feature or request

Status: Open.

#1188 In zizmorcore/zizmor;

· martincostello opened on Sep 27, 2025

CLI: warn the user if any input has YAML anchors in it

cli

Status: Open.

#1176 In zizmorcore/zizmor;

· woodruffw opened on Sep 25, 2025

[BUG]: Device file is treated as repo slug

bugSomething isn't workingSomething isn't working

cli

Status: Open.

#1174 In zizmorcore/zizmor;

· ligix opened on Sep 23, 2025

Feature: allow a small subset of dangerous triggers through

enhancementNew feature or requestNew feature or request

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#1168 In zizmorcore/zizmor;

· woodruffw opened on Sep 19, 2025

Feature: Publish the schema of zizmor.yml to https://www.schemastore.org

enhancementNew feature or requestNew feature or request

good first issueGood for newcomersGood for newcomers

help wantedExtra attention is neededExtra attention is needed

Status: Open.

Feature

#1138 In zizmorcore/zizmor;

· vivodi opened on Sep 4, 2025