The short version
A GitHub Actions security linter for catching workflow footguns.
From the HackerLinks archive
A GitHub Actions security linter for catching workflow footguns.
The short version
A GitHub Actions security linter for catching workflow footguns.
Why it caught our attention
A commenter gave it an unambiguous recent personal endorsement.
Where it surfaced on Hacker News
“also been a huge fan of zizmor (https://github.com/zizmorcore/zizmor) lately, basically: "am I going to footgun myself?"”
thejosh · recommendation · first hand use
Direct HN comment
AI-Generated GitHub Copilot “Autofix” Allowed Compromise of Snowflake's Jira