Search results

[BUG]: ref-version-mismatch causes persistent false positives for prerelease tags

bugSomething isn't workingSomething isn't working

false-positive

Status: Open.

#1869 In zizmorcore/zizmor;

· shaanmajid opened on Apr 7, 2026

[BUG]: False positive superfluous-actions for dtolnay/rust-toolchain on self-hosted runner

bugSomething isn't workingSomething isn't working

triageIssue is being triagedIssue is being triaged

Status: Open.

#1865 In zizmorcore/zizmor;

· AntoineSebert opened on Apr 7, 2026

[BUG]: use-trusted-publishing: false negative for token-based publish workflows using id-token: write for provenance

bugSomething isn't workingSomething isn't working

false-negative

Status: Open.

#1848 In zizmorcore/zizmor;

· shaanmajid opened on Apr 2, 2026

Feature: Detect missing version comments on SHA-pinned actions

enhancementNew feature or requestNew feature or request

Status: Open.

#1836 In zizmorcore/zizmor;

· shaanmajid opened on Mar 31, 2026

Quirk: the warning for a failed file validation doesn't mention the file

Status: Open.

#1835 In zizmorcore/zizmor;

· henryiii opened on Mar 30, 2026

Feature: Use unicode rendering in lints

cli

enhancementNew feature or requestNew feature or request

Status: Open.

#1819 In zizmorcore/zizmor;

· epage opened on Mar 27, 2026

Feature: detect secrets exposed beyond the steps that need them

enhancementNew feature or requestNew feature or request

new-auditNew auditsNew audits

Status: Open.

#1816 In zizmorcore/zizmor;

· Danil42Russia opened on Mar 27, 2026

Feature: audit for Dependabot configs that miss local composite actions

discussion

enhancementNew feature or requestNew feature or request

new-auditNew auditsNew audits

Status: Open.

#1806 In zizmorcore/zizmor;

· woodruffw opened on Mar 26, 2026

Feature: Depot CI Support

enhancementNew feature or requestNew feature or request

long-term

sponsorable:10kFundable improvement via GitHub sponsors; see https://github.com/sponsors/woodruffwFundable improvement via GitHub sponsors; see https://github.com/sponsors/woodruffw

Status: Open.

#1803 In zizmorcore/zizmor;

· cedws opened on Mar 26, 2026

Support pre-commit configs for auditing?

discussion

enhancementNew feature or requestNew feature or request

Status: Open.

#1799 In zizmorcore/zizmor;

· woodruffw opened on Mar 25, 2026

New audit: unpinned-tools

enhancementNew feature or requestNew feature or request

new-auditNew auditsNew audits

Status: Open.

#1775 In zizmorcore/zizmor;

· woodruffw opened on Mar 21, 2026

[BUG]: Part of the path is missing when displayed in GitHub format

bugSomething isn't workingSomething isn't working

Status: Open.

#1745 In zizmorcore/zizmor;

· Danil42Russia opened on Mar 10, 2026