Search results

Feature: Allow the persona to be set in zizmor.yml

enhancementNew feature or requestNew feature or request

triageIssue is being triagedIssue is being triaged

Status: Open.

#1445 In zizmorcore/zizmor;

· johnbillion opened on Dec 14, 2025

Reconsider the default inclusion of official GitHub actions in unpinned-uses

Status: Open.

#1434 In zizmorcore/zizmor;

· johnbillion opened on Dec 11, 2025

·  

1.20.0

[BUG]: Error type not printed

Status: Open.

#1433 In zizmorcore/zizmor;

· esafak opened on Dec 11, 2025

[BUG]: Inconsistent/inaccurate action/job terminology use

documentationImprovements or additions to documentationImprovements or additions to documentation

Status: Open.

#1432 In zizmorcore/zizmor;

· scop opened on Dec 11, 2025

Feature: consider safe contexts for github-env

enhancementNew feature or requestNew feature or request

triageIssue is being triagedIssue is being triaged

Status: Open.

#1424 In zizmorcore/zizmor;

· madrob opened on Dec 8, 2025

Enhancement: <code>Op::Append</code> on nested sequences

autofixAuto-fix functionalityAuto-fix functionality

enhancementNew feature or requestNew feature or request

Status: Open.

#1407 In zizmorcore/zizmor;

· omar-s-ta opened on Dec 3, 2025

New audit: detect usage of <code>npm install|ci ...</code> without <code>--ignore-scripts</code>

discussion

enhancementNew feature or requestNew feature or request

new-auditNew auditsNew audits

Status: Open.

#1405 In zizmorcore/zizmor;

· woodruffw opened on Dec 2, 2025

[Docs]: Link to GitHub docs on token permissions in excessive-permissions audit no longer has the list of permissions

documentationImprovements or additions to documentationImprovements or additions to documentation

good first issueGood for newcomersGood for newcomers

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#1359 In zizmorcore/zizmor;

· jfrost-mo opened on Nov 24, 2025

UX: Poor experience across multiple private repos

bounty:1k

cli

long-term

user-experience

Status: Open.

#1350 In zizmorcore/zizmor;

· woodruffw opened on Nov 19, 2025

New audit: detect PR creation workflows that don't use drafting

enhancementNew feature or requestNew feature or request

new-auditNew auditsNew audits

Status: Open.

#1348 In zizmorcore/zizmor;

· woodruffw opened on Nov 18, 2025

Autofixes for <code>template-injection</code> are not shell-quoting aware

autofix:unsound

bounty:1k

long-term

Status: Open.

#1346 In zizmorcore/zizmor;

· nikolay opened on Nov 18, 2025

New audit: archived action usage

enhancementNew feature or requestNew feature or request

new-auditNew auditsNew audits

Status: Open.

#1313 In zizmorcore/zizmor;

· woodruffw opened on Nov 3, 2025