All pull requests

Pull requests

• typosquat-uses: support pre-commit inputs

  enhancement
  #2437·woodruffw opened Oct 9, 2026Member·

  ·

• chore(deps): bump github/codeql-action/upload-sarif from 4.38.1 to 4.38.2 in the github-actions group

  dependenciesgithub_actions
  #2435·dependabot[bot] opened Oct 5, 2026Bot·

  ·

• use-trusted-publishing: read every argument of PowerShell commands

  #2431·LucaCappelletti94 opened Oct 3, 2026·2 tasks done·

  ·
  1

  6

• Add Windows ARM64 builds

  packagingwindows
  #2424·ndabas opened Oct 1, 2026Contributor·2 tasks·

  ·
  4

• Handle single quote escaping in "raw" expressions

  bugfix
  #2423·woodruffw opened Oct 1, 2026Member·

  ·
  1

  1

• feat(superfluous-actions): allow rust-toolchain on self-hosted runners

  #2405·ubiratansoares opened Sep 22, 2026Contributor·2 tasks done·

  ·
  1

  1

• Add zizmor-http-cache

  internalrefactorrun-benchmarks
  #2364·woodruffw opened Sep 4, 2026Member·

  ·
  5

• chore: add docs issue template

  #2329·trueberryless opened Aug 22, 2026Contributor·2 tasks done·

  ·
  1

  4

• Add a GitHub.com fallback token for GitHub Enterprise

  needs-decision
  #2318·JackMyers001 opened Aug 18, 2026·2 tasks done·

  ·
  1

  11

• Support audit ID aliasing

  #2233·woodruffw opened Jul 24, 2026Member·

  ·

• feat: add timeout-minutes audit

  enhancementnew-audit
  #2166·mchevestrier opened Jul 5, 2026·1 of 2 tasks·

  ·

  · 1.31.0
  1

  9

• Fix on.workflow_call.secrets: inherit deserialization and flag it in secrets-inherit

  #2159·david-wagih opened Jun 29, 2026Contributor·2 tasks done·

  ·

  · 1.31.0
  1

  9

• Foundation for a better 'self-hosted' check

  refactor
  #2140·woodruffw opened Jun 22, 2026Member·

  ·
  5

  

• fix(config): treat empty or comment-only config files as valid

  bugfixconfig
  #2108·serval-frenchie opened Jun 8, 2026·2 tasks done·

  ·
  1

  8

• Add --select flag to run only selected audit rules

  #2081·ytausch opened May 29, 2026·2 tasks done·

  ·

  · 1.31.0
  3

• Reproducer for #1914

  bugfix
  #1927·woodruffw opened Apr 18, 2026Member·

  ·

• secrets-outside-env: flag secrets in reusable workflow calls

  enhancement
  #1792·woodruffw opened Mar 24, 2026Member·

  ·
  1

  

• feat(unpinned-images): Docker CLI models with clap

  #1711·jfagoagas opened Mar 6, 2026·4 tasks done·

  ·
  6

• Update --quiet flag and introduce --silent flag

  #1696·my1e5 opened Mar 4, 2026·2 tasks done·

  ·
  1

  5

• feat(unpinned-images): detect docker/podman commands in run: steps

  #1677·jfagoagas opened Mar 1, 2026·2 of 7 tasks·

  ·
  1

  31

• feat(config): use toml for configuring zizmor

  #1666·reubenwong97 opened Feb 26, 2026Contributor·1 of 2 tasks·

  ·
  2

• feat: new audit: agentic-actions (#1605)

  #1655·BuffaloWill opened Feb 23, 2026·2 tasks done·

  ·
  1

  22

• Flag missing concurrency when all jobs are reusable

  #1621·woodruffw opened Feb 15, 2026Member·

  ·
  1

  

• Detect and report GitHub API rate limiting

  #1609·dguido opened Feb 12, 2026Contributor·6 tasks done·

  ·
  1

  17

• fix: Deduplicate findings due to anchors

  bugfix
  #1584·DarkaMaul opened Jan 30, 2026Contributor·2 tasks done·

  ·
  9