BSD Ports

devel/zizmor 1.31.1 FreeBSD

Static analysis for GitHub Actions

System
FreeBSD
Repository
FreeBSD ports
Maintainer
[email protected]
Port added
Last update
Commit
4e6a9fe110
License
MIT
Categories
devel
Package size
5084.3 KiB, 18376.5 KiB installed

Description

zizmor is a static analysis tool for CI/CD systems.

It can find and fix security issues in common CI/CD setups, including GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor finds:

  • Template injection vulnerabilities, leading to attacker-controlled code execution
  • Accidental credential persistence and leakage
  • Excessive permission scopes and credential grants to runners
  • Impostor commits and confusable git references
  • ...and much more!

In the other systems

SystemPortVersion
FreeBSDdevel/zizmor1.31.1
OpenBSDdevel/zizmor1.31.1
HardenedBSDdevel/zizmor1.30.1
GhostBSDdevel/zizmor1.30.1

Install

Binary package:

pkg install zizmor

From the ports tree:

cd /usr/ports/devel/zizmor/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	zizmor>0:devel/zizmor

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest1.30.11.31.1--1.31.1
FreeBSD:14:quarterly1.30.11.30.1n/a-1.30.1
FreeBSD:15:latest1.30.1_11.31.1n/a--
FreeBSD:15:quarterly1.30.11.30.1n/an/an/a
FreeBSD:16:latest1.30.11.31.1n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

The Makefile names none itself; they come from USES and USE_*.

The full lists below include those, and their dependencies in turn.

Build dependencies 18

No port depends on this one.

Configuration

Options name: devel_zizmor

OptionDefaultDescription
COMPLETIONSonBuild and/or install shell completions
DOCSoffBuild and/or install documentation
USES
cargo
Service scripts
none

Files

distinfo 442
FileSizeSHA256
rust/crates/addr2line-0.25.1.crate431341b5d307320b3181d6d7954e663bd7c774a838b8220fe0593c86d9fb09f498b4b
rust/crates/adler2-2.0.1.crate13366320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa
rust/crates/ahash-0.8.12.crate434135a15f179cd60c4584b8a8c596927aadc462e27f2ca70c04e0071964a73ba7a75
rust/crates/aho-corasick-1.1.3.crate1833118e60d3430d3a69478ad0993f19238d2df97c507009a52b3c10addcd7f6bcb916
rust/crates/allocator-api2-0.2.21.crate63622683d7910e743518b0e34f1186f92494becacb047c7b6bf616c96772180fef923
rust/crates/annotate-snippets-0.12.16.crate56108f211a51805bc641f3ad5b7664c77d2547af685cc33b4cd8d31964027a46f13f1
rust/crates/anstream-1.0.0.crate28916824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d
rust/crates/anstyle-1.0.14.crate17787940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000
rust/crates/anstyle-parse-1.0.0.crate2204252ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e
rust/crates/anstyle-query-1.1.4.crate101929e231f6134f61b71076a3eab506c379d4f36122f2af15a9ff04415ea4c3339e2
rust/crates/anstyle-wincon-3.0.10.crate125583e0633414522a32ffaac8ac6cc8f748e090c5717661fddeea04219e2344f5f2a
rust/crates/anyhow-1.0.104.crate48819330a5ed07fa54e4702c9d6c4174f74427fc0ef6e214bbd677ae50a5099946470
rust/crates/arrayvec-0.7.6.crate312377c02d123df017efcdfbd739ef81735b36c5ba83ec3c59c80a9d7ecc718f92e50
rust/crates/assert_cmd-2.2.2.crate276832aa3a22042e45de04255c7bf3626e239f450200fd0493c1e382263544b20aea6
rust/crates/async-lock-3.4.2.crate39826290f7f2596bd5b78a9fec8088ccd89180d7f9f55b94b0576823bbbdc72ee8311
rust/crates/async-trait-0.1.92.crate3203982f6aeea286b8eb4dd3431a1be1b59d290ace00f5bfd8e2a159bc2a05e2c1667
rust/crates/atomic-waker-1.1.2.crate124221505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0
rust/crates/autocfg-1.5.0.crate18729c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8
rust/crates/aws-lc-rs-1.17.0.crate2391135ec2f1fc3ec205783a5da9a7e6c1509cc69dedf09a1949e412c1e18469326d00
rust/crates/aws-lc-sys-0.41.0.crate9.517046e+061a2f9779ce85b93ab6170dd940ad0169b5766ff848247aff13bb788b832fe3f4

Commit history 3

DateCommitCreditsLog message
4e6a9fe110 Hiroki Tagato devel/zizmor: Update to 1.31.1
While here, simplify shell completions installation. Changelog: - https://github.com/zizmorcore/zizmor/releases/tag/v1.31.0 - https://github.com/zizmorcore/zizmor/releases/tag/v1.31.1 Reported by: GitHub (watch releases)
9c878207a1 Mikael Urankar lang/rust: Bump revisions after 1.99.0
PR: 299016
8922aa980a Hiroki Tagato devel/zizmor: Add port: Static analysis for GitHub Actions
zizmor is a static analysis tool for CI/CD systems. It can find and fix security issues in common CI/CD setups, including GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor finds: - Template injection vulnerabilities, leading to attacker-controlled code execution - Accidental credential persistence and leakage - Excessive permission scopes and credential grants to runners - Impostor commits and confusable git references - ...and much more! WWW: https://docs.zizmor.sh/ WWW: https://github.com/zizmorcore/zizmor