🧰 zizmor

The items that name it 5

• The Pwn Request Reckoning: What Still Works Against GitHub Actions
  articleas classification.technologies2026-10-26
• DocsGPT Security Hardening Playbook
  writeupas tools2026-08-15

  Hardens GitHub Actions workflows (pinned action SHAs, persist-credentials: false, least-privilege permissions)

• glsec
  repoas tools2026-07-29

  comparable security linter, but for GitHub Actions (mentioned as analogue to glsec)

• Introducing Patch the Planet
  articleas tools2026-06-22

  open-source GitHub Actions static analyzer; integrated into python.org CI after fixing all flagged issues

• Bringing full YAML anchor support to zizmor
  articleas tools2026-05-22

  Static analyzer that GitHub Actions users run to catch security misconfigurations in workflows before they ship