devel/zizmor 1.31.1 OpenBSD
static analysis tool for GitHub Actions
- System
- OpenBSD
- Repository
- OpenBSD ports
- Maintainer
- Theo Buehler <[email protected]>
- Last update
- Commit
8491155003- Categories
- devel, lang/rust
Description
zizmor is a static analysis tool for GitHub Actions.
It can find many common issues in typical GitHub Actions CI/CD setups, including:
* Template injection vulnerabilities, leading to attacker-controlled code execution * Accidental credential persistence and leakage * Excessive permission scopes and credential grants to runners * Impostor commits and confusable git references
In the other systems
The newest version among them is 1.31.1, as upstream numbers it.
| System | Port | Version | Vulnerabilities | Status | Maintainer | Last update |
|---|---|---|---|---|---|---|
| OpenBSD | devel/zizmor | 1.31.1 newest | no data | - | Theo Buehler <[email protected]> | 2026-10-19 |
| FreeBSD | devel/zizmor | 1.31.1 newest | none known | - | [email protected] | 2026-10-17 |
| HardenedBSD | devel/zizmor | 1.30.1 behind since 2026-10-17 | no data | - | [email protected] | - |
| GhostBSD | devel/zizmor | 1.30.1 behind since 2026-10-17 | no data | - | [email protected] | - |
Install
Binary package:
pkg_add zizmor
From the ports tree:
cd /usr/ports/devel/zizmor && make install
Dependency graph
Ports that need it on the left, what it needs to run on the right (to build, as it needs nothing to run); at most 8 of each. "Dependencies" below lists them all.
Dependencies
Build dependencies 2
No port depends on this one.
Commit history 7
The latest 5 of 7 in the history this site was built from.