Automic VaultAutomic Vault

brew / Rang 698

zizmor installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für zizmor in AI-Agent-Workflows.

InstallationsbefehlSicherheitshinweise

Installation

Mit Automic Vault installieren

Automic Vault
AV herunterladen
sudo av install brew:zizmor

macOS

Homebrewverified · 100%
brew install zizmor

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install zizmor

MacPorts ports tree · security/zizmor/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add zizmor

Alpine Linux edge package indexes · zizmor · source: dl-cdn.alpinelinux.org

Nixverified · 92%
nix profile install nixpkgs#zizmor

nixpkgs package indexes · pkgs/by-name/zi/zizmor/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S zizmor

Arch Linux sync databases · zizmor · source: geo.mirror.pkgbuild.com

openSUSE zypperverified · 92%
sudo zypper install zizmor

openSUSE Tumbleweed package metadata · zizmor · source: download.opensuse.org

Windows

Scoopverified · 92%
scoop install main/zizmor

Scoop official bucket manifest trees · bucket/zizmor.json · source: api.github.com

Windows Package Managerverified · 92%
winget install --id zizmor.zizmor -e

Windows Package Manager source index · zizmor.zizmor · source: cdn.winget.microsoft.com

Plattformhinweise

  • Es waren keine paketspezifischen Plattformhinweise vorhanden.

Überblick

Paketzusammenfassung

Find security issues in GitHub Actions setups

Befehle und Aliase

  • zizmor

Sicherheitslage

Risikostufe: green

no executable entrypoint in the package index.

Risk classifier

green risk · low confidence · appliance

Why

  • no executable entrypoint in the package index

Signals

  • metadata:no-indexed-executables

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 2 build dependencies.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
zizmorcliglobal executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-06-10
Manager-Version1.25.2
Manager aktualisiert2026-05-16
lokale Datenok
Upstreamcurrent
neueste erkannte Versionv1.25.2

https://github.com/zizmorcore/zizmor

  • okNo freshness warnings were generated.

Installationsmetadaten

Paketmetadaten

Package keybrew:zizmor
Version1.25.2
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/zizmor
Homepagehttps://docs.zizmor.sh/
Repositoryhttps://github.com/zizmorcore/zizmor
Upstream docshttps://docs.zizmor.sh/
LicenseMIT
Source archivehttps://github.com/zizmorcore/zizmor/archive/refs/tags/v1.25.2.tar.gz
Last updated2026-05-16T07:44:20Z
Pulseupdated
Build dependenciespkgconf, rust
Bottleavailable (arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namezizmor
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

zizmor

nix profile install nixpkgs#zizmor
  • normalized package name match
  • Matched by: Zizmor
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/zi/zizmor/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

zizmor 1.25.2-r0

A static analysis tool for GitHub Actions

https://github.com/zizmorcore/zizmor

sudo apk add zizmor
  • License: MIT
  • Architecture: x86_64
  • Source Package: zizmor
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Zizmor
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: zizmor from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

zizmor-doc 1.25.2-r0

A static analysis tool for GitHub Actions (documentation)

https://github.com/zizmorcore/zizmor

sudo apk add zizmor-doc
  • License: MIT
  • Architecture: x86_64
  • Source Package: zizmor
  • normalized package name match
  • Matched by: Zizmor
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: zizmor-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
pacman95%

zizmor 1.25.2-1

A static analysis tool for GitHub Actions

https://github.com/zizmorcore/zizmor

sudo pacman -S zizmor
  • License: MIT
  • Architecture: x86_64
  • 2 dependencies
  • normalized package name match
  • Matched by: Zizmor
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: zizmor from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

zizmor 1.25.2-1.1

A static analysis tool for GitHub Actions

https://github.com/zizmorcore/zizmor

sudo zypper install zizmor
  • License: MIT
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: zizmor
  • 3 dependencies
  • 2 provides
  • normalized package name match
  • Matched by: Zizmor
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: zizmor from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst
zypper95%

zizmor-bash-completion 1.25.2-1.1

Bash Completion for zizmor

https://github.com/zizmorcore/zizmor

sudo zypper install zizmor-bash-completion
  • License: MIT
  • Category: System/Shells
  • Architecture: noarch
  • Source Package: zizmor
  • 2 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Zizmor
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: zizmor-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst
zypper95%

zizmor-fish-completion 1.25.2-1.1

Fish Completion for zizmor

https://github.com/zizmorcore/zizmor

sudo zypper install zizmor-fish-completion
  • License: MIT
  • Category: System/Shells
  • Architecture: noarch
  • Source Package: zizmor
  • 2 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Zizmor
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: zizmor-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst
zypper95%

zizmor-zsh-completion 1.25.2-1.1

Zsh Completion for zizmor

https://github.com/zizmorcore/zizmor

sudo zypper install zizmor-zsh-completion
  • License: MIT
  • Category: System/Shells
  • Architecture: noarch
  • Source Package: zizmor
  • 2 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Zizmor
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: zizmor-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst
MacPorts95%

zizmor

sudo port install zizmor
  • normalized package name match
  • Matched by: Zizmor
MacPorts ports tree · api.github.com · MacPorts ports tree: security/zizmor/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Scoop95%

main/zizmor

scoop install main/zizmor
  • normalized package name match
  • Matched by: Zizmor
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/zizmor.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
winget95%

zizmor.zizmor

winget install --id zizmor.zizmor -e
  • normalized package name match
  • Matched by: Zizmor
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: zizmor.zizmor from https://cdn.winget.microsoft.com/cache/source.msix

Paketgraph

Links stammen aus dem lokalen Paketbeziehungsgraph, Ergänzungen, Abhängigkeitskanten, Ecosystem-Matches und Paket-Hub-Mitgliedschaft.

Verwandte Tools

  • pkgconfBuild dependency declared by Homebrew.
  • rustBuild dependency declared by Homebrew.

Gleicher Workflow

  • vetShares av.db curated category or tags: cli, security, supply-chain, supply-chain-security.
  • chain-benchShares av.db curated category or tags: cli, security, supply-chain, supply-chain-security.
  • poutineShares av.db curated category or tags: ci, cli, github-actions, security, supply-chain-security.
  • opensca-cliShares av.db curated category or tags: cli, security, supply-chain, supply-chain-security.
  • frizbeeShares av.db curated category or tags: cli, github-actions, security, supply-chain.
  • slsa-verifierShares av.db curated category or tags: cli, security, supply-chain, supply-chain-security.

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment