BSD Ports

devel/zizmor 1.31.1 OpenBSD

static analysis tool for GitHub Actions

System
OpenBSD
Repository
OpenBSD ports
Maintainer
Theo Buehler <[email protected]>
Last update
Commit
8491155003
Categories
devel, lang/rust

Description

zizmor is a static analysis tool for GitHub Actions.

It can find many common issues in typical GitHub Actions CI/CD setups, including:

* Template injection vulnerabilities, leading to attacker-controlled code execution * Accidental credential persistence and leakage * Excessive permission scopes and credential grants to runners * Impostor commits and confusable git references

In the other systems

The newest version among them is 1.31.1, as upstream numbers it.

SystemPortVersionVulnerabilitiesStatusMaintainerLast update
OpenBSDdevel/zizmor1.31.1 newestno data-Theo Buehler <[email protected]>2026-10-19
FreeBSDdevel/zizmor1.31.1 newestnone known-[email protected]2026-10-17
HardenedBSDdevel/zizmor1.30.1 behind since 2026-10-17no data-[email protected]-
GhostBSDdevel/zizmor1.30.1 behind since 2026-10-17no data-[email protected]-

Compare across BSDs

Install

Binary package:

pkg_add zizmor

From the ports tree:

cd /usr/ports/devel/zizmor && make install

Dependency graph

Ports that need it on the left, what it needs to run on the right (to build, as it needs nothing to run); at most 8 of each. "Dependencies" below lists them all.

Dependencies

Build dependencies 2

No port depends on this one.

Commit history 7

DateCommitCreditsLog message
8491155003 tb Update to zizmor 1.31.1
https://github.com/zizmorcore/zizmor/releases/tag/v1.31.1
e00f1583d3 tb Update to zizmor 1.31.0
https://github.com/zizmorcore/zizmor/releases/tag/v1.31.0
ff583304e4 tb Update to zizmor 1.30.1
https://github.com/zizmorcore/zizmor/releases/tag/v1.30.1
4b806e3b96 tb Update to zizmor 1.30.0
https://github.com/zizmorcore/zizmor/releases/tag/v1.30.0
58eb0d52d2 tb Update to zizmor 1.29.0
https://github.com/zizmorcore/zizmor/releases/tag/v1.29.0

The latest 5 of 7 in the history this site was built from.