CmdID

CmdID / Commands

zizmor

Find security issues in GitHub Actions workflows and action definitions. tldr-pages

On several platforms

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Audit all workflows and actions in the current directory

zizmor .Identify

Audit a specific workflow file

zizmor path/to/workflow.ymlIdentify

Audit a remote GitHub repository (requires a GitHub token)

zizmor --gh-token token username/repositoryIdentify

Run only offline audits (no network requests)

zizmor --offline path/to/workflow.ymlIdentify

Output results in SARIF format

zizmor --format sarif path/to/workflow.ymlIdentify

Filter findings by minimum severity

zizmor --min-severity informational .Identify

Display help

zizmor --helpIdentify

Display version

zizmor --versionIdentify