Tools
zizmor
zizmorcore/zizmor
zizmor is a static analysis tool for CI/CD configurations such as GitHub Actions, detecting template injection, credential leakage, excessive permissions, and other security issues.
Topics
Related projects
gosec9kA Go security checker that scans source code via AST, SSA, and taint analysis to detect common vulnerabilities, usable as a CLI or GitHub Action.
brakeman7.3kBrakeman is a static analysis security scanner for Ruby on Rails applications that inspects source code for vulnerabilities and reports findings in multiple formats.
trivy39.3kA comprehensive security scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM issues across container images, filesystems, repositories, Kubernetes, and clouds.
web-check35.5kAn all-in-one OSINT web application that analyses any website's security configuration, server architecture, technologies, and potential attack surface.
gitleaks31kA fast CLI scanner that finds passwords, API keys, and tokens leaked in git repos, files, and CI pipelines.
infisical30.4kAn open-source security infrastructure platform for managing secrets, certificates, privileged access, and credentials used by AI agents.