Search results

[BUG]: Docs -> GH action integration is getting flagged by zizmor itself

needs-mre

Status: Open.

#2079 In zizmorcore/zizmor;

· huang-julien opened on May 29, 2026

Feature: runner policies

enhancementNew feature or requestNew feature or request

new-auditNew auditsNew audits

sponsorable:5kFundable improvement via GitHub sponsors; see https://github.com/sponsors/woodruffwFundable improvement via GitHub sponsors; see https://github.com/sponsors/woodruffw

Status: Open.

#2072 In zizmorcore/zizmor;

· dbermuehler opened on May 27, 2026

Feature: cache-poisoning for heuristic for release event

enhancementNew feature or requestNew feature or request

false-positive

Status: Open.

#2071 In zizmorcore/zizmor;

· danyeaw opened on May 26, 2026

Feature: Rule to ban install of packages outside the context of a lockfile (npm install pkg, gem install pkg)

enhancementNew feature or requestNew feature or request

new-auditNew auditsNew audits

Status: Open.

#2057 In zizmorcore/zizmor;

· connorshea opened on May 24, 2026

Feature: add --gh-token=auto to invoke gh auth token automativally

enhancementNew feature or requestNew feature or request

needs-decision

Status: Open.

#2052 In zizmorcore/zizmor;

· segiddins opened on May 23, 2026

Feature: Warn on package install without a cooldown

enhancementNew feature or requestNew feature or request

Status: Open.

#2044 In zizmorcore/zizmor;

· JelleZijlstra opened on May 21, 2026

Feature: Auto-fix for unpinned-images

enhancementNew feature or requestNew feature or request

Status: Open.

#2033 In zizmorcore/zizmor;

· tnytown opened on May 18, 2026

archived-uses: suggest alternative actions

enhancementNew feature or requestNew feature or request

Status: Open.

#2028 In zizmorcore/zizmor;

· woodruffw opened on May 17, 2026

·  

1.26.0

Feature request: new audit for insecure-ssh-keyscan - trust-on-first-use host key acceptance

enhancementNew feature or requestNew feature or request

new-auditNew auditsNew audits

Status: Open.

#2012 In zizmorcore/zizmor;

· predictor2718 opened on May 15, 2026

Feature: warn about GHA jobs with id-token: write attempting to build / invoke unrelated scripts

discussion

enhancementNew feature or requestNew feature or request

Status: Open.

#1968 In zizmorcore/zizmor;

· webknjaz opened on May 4, 2026

Feature: support --fix to reduce excessive permissions

enhancementNew feature or requestNew feature or request

triageIssue is being triagedIssue is being triaged

Status: Open.

#1958 In zizmorcore/zizmor;

· vmvarela opened on Apr 30, 2026

Feature: Apply auto fixes for specific rules

cli

enhancementNew feature or requestNew feature or request

Status: Open.

#1951 In zizmorcore/zizmor;

· uncenter opened on Apr 28, 2026