zizmor

all

Find security issues in GitHub Actions workflows and action definitions.

Options (3)

-o, --offlineboolean

Run only offline audits (no network requests)

Example: zizmor {{[-o|--offline]}} {{path/to/workflow.yml}}

-h, --helpboolean

Display help

Example: zizmor {{[-h|--help]}}

-v, --versionboolean

Display version

Example: zizmor {{[-v|--version]}}

Audit all workflows and actions in the current directory

zizmor .

Audit a specific workflow file

zizmor path/to/workflow.yml

Audit a remote GitHub repository (requires a GitHub token)

zizmor --gh-token token username/repository

Run only offline audits (no network requests)

zizmor [-o|--offline] path/to/workflow.yml

Output results in SARIF format

zizmor --format sarif path/to/workflow.yml

Filter findings by minimum severity

zizmor --min-severity informational|low|medium|high .

Display help

zizmor [-h|--help]

Display version

zizmor [-v|--version]