SalamLang/Salam

Add pre-commit hook zizmor a static analysis tool for GitHub Actions

Open

#1,036 opened on Jun 27, 2025

View on GitHub
 (0 comments) (0 reactions) (1 assignee)C (22 forks)auto 404
configgithub_actionsgood first issuehacktoberfestsecurityyaml

Repository metrics

Stars
 (28 stars)
PR merge metrics
 (PR metrics pending)

Description

zizmor can find many common security issues in typical GitHub Actions CI/CD setups.

https://docs.zizmor.sh/

https://github.com/zizmorcore/zizmor

https://github.com/zizmorcore/zizmor-pre-commit

zizmor comes with audit rules and you use a configuration file zizmor.yml

Contributor guide

Research direction
Tech stack
Domain
Issue type
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Prerequisites
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.