zizmor

48 · Thiago Perrotta · Oct. 3, 2025, 11:06 a.m.
Summary
The blog post discusses the author's experience with 'zizmor', a static analysis tool for GitHub Actions that helps in identifying and fixing security issues. Originally discovered at FOSDEM 2025, the author adopted the tool in their company's critical repositories and has since maintained it in the Alpine Linux repositories. The post highlights the growth and success of the project over its first year, crediting the dedication of its author, William Woodruff.