All pull requests

Pull requests

• chore(deps-dev): bump the uv group with 2 updates

  dependenciespython:uv
  #2417·dependabot[bot] opened Sep 28, 2026Bot·

  ·

• chore(deps): bump the github-actions group with 2 updates

  dependenciesgithub_actions
  #2416·dependabot[bot] opened Sep 28, 2026Bot·

  ·

• chore(deps): bump the cargo group with 3 updates

  dependenciesrust
  #2415·dependabot[bot] opened Sep 28, 2026Bot·

  ·

• Refactor Trigger

  internalrefactor
  #2414·woodruffw opened Sep 28, 2026Member·

  ·
  

• feat(superfluous-actions): allow rust-toolchain on self-hosted runners

  #2405·ubiratansoares opened Sep 22, 2026Contributor·

  ·
  1

  1

• Add zizmor-http-cache

  internalrefactorrun-benchmarks
  #2364·woodruffw opened Sep 4, 2026Member·

  ·
  5

• chore: add docs issue template

  #2329·trueberryless opened Aug 22, 2026Contributor·

  ·
  1

  4

• Add a GitHub.com fallback token for GitHub Enterprise

  needs-decision
  #2318·JackMyers001 opened Aug 18, 2026·

  ·
  1

  10

• Support audit ID aliasing

  #2233·woodruffw opened Jul 24, 2026Member·

  ·

• feat: add timeout-minutes audit

  enhancementnew-audit
  #2166·mchevestrier opened Jul 5, 2026·

  ·

  · 1.31.0
  1

  9

• Fix on.workflow_call.secrets: inherit deserialization and flag it in secrets-inherit

  #2159·david-wagih opened Jun 29, 2026Contributor·

  ·

  · 1.31.0
  1

  9

• Foundation for a better 'self-hosted' check

  refactor
  #2140·woodruffw opened Jun 22, 2026Member·

  ·
  5

  

• fix(config): treat empty or comment-only config files as valid

  bugfixconfig
  #2108·serval-frenchie opened Jun 8, 2026·

  ·
  1

  8

• Add --select flag to run only selected audit rules

  #2081·ytausch opened May 29, 2026·

  ·

  · 1.31.0
  3

• Reproducer for #1914

  bugfix
  #1927·woodruffw opened Apr 18, 2026Member·

  ·

• secrets-outside-env: flag secrets in reusable workflow calls

  enhancement
  #1792·woodruffw opened Mar 24, 2026Member·

  ·
  1

  

• feat(unpinned-images): Docker CLI models with clap

  #1711·jfagoagas opened Mar 6, 2026·

  ·
  6

• Update --quiet flag and introduce --silent flag

  #1696·my1e5 opened Mar 4, 2026·

  ·
  1

  5

• feat(unpinned-images): detect docker/podman commands in run: steps

  #1677·jfagoagas opened Mar 1, 2026·

  ·
  1

  31

• feat(config): use toml for configuring zizmor

  #1666·reubenwong97 opened Feb 26, 2026Contributor·

  ·
  2

• feat: new audit: agentic-actions (#1605)

  #1655·BuffaloWill opened Feb 23, 2026·

  ·
  1

  22

• Flag missing concurrency when all jobs are reusable

  #1621·woodruffw opened Feb 15, 2026Member·

  ·
  1

  

• Detect and report GitHub API rate limiting

  #1609·dguido opened Feb 12, 2026Contributor·

  ·
  1

  17

• fix: Deduplicate findings due to anchors

  bugfix
  #1584·DarkaMaul opened Jan 30, 2026Contributor·

  ·
  9

• feat(uses): add glob pattern support for repository matching

  configenhancement
  #1559·ryandelano opened Jan 22, 2026·

  ·

  · 1.31.0
  28