A first look at zizmor: static analysis for GitHub Actions
DevSecOps6 min read
A small look on what zizmor can catch, how to gate CI with it and its limits.
// Cybersecurity student · DevSecOps · Cloud & app security
1 entry
Pipeline security, scanning gates, supply chain, SBOMs.
A small look on what zizmor can catch, how to gate CI with it and its limits.