Skip to main content

Code & supply chain

GitHub Actions security audit

Workflow files audited daily for IaC security anti-patterns.

Awaiting next run

scan output missing

Checked 9/20/2026, 2:19:56 AM · Source: Continuous integration

Zizmor did not produce output. Check the workflow run logs.

What this check means

A GitHub-Actions-specific security auditor (https://docs.zizmor.sh) inspects every workflow in .github/workflows for unpinned action references, template-injection footguns, secrets accessed outside a GH Environment, excessive permissions, cache-poisoning surfaces, and other CI-supply-chain risks. Complements the broader Checkov IaC pass with workflow-aware rules. Project-level exclusions are documented in zizmor.yml at the repo root.

Recent runs

WhenResultSource
9/20/2026, 2:19:56 AMscan output missingContinuous integration
9/19/2026, 2:19:12 AMscan output missingContinuous integration
9/18/2026, 2:19:22 AMscan output missingContinuous integration
9/17/2026, 2:19:51 AMscan output missingContinuous integration
9/16/2026, 2:19:44 AMscan output missingContinuous integration
9/15/2026, 2:20:27 AMscan output missingContinuous integration
9/14/2026, 2:22:54 AMscan output missingContinuous integration
9/13/2026, 2:19:41 AMscan output missingContinuous integration
9/12/2026, 2:19:43 AMscan output missingContinuous integration
9/11/2026, 2:20:08 AMscan output missingContinuous integration
9/10/2026, 2:20:23 AMscan output missingContinuous integration
9/9/2026, 2:19:36 AMscan output missingContinuous integration
9/8/2026, 2:19:21 AMscan output missingContinuous integration
9/7/2026, 2:21:09 AMscan output missingContinuous integration
9/6/2026, 2:19:49 AMscan output missingContinuous integration
9/5/2026, 2:18:57 AMscan output missingContinuous integration
9/4/2026, 2:20:04 AMscan output missingContinuous integration
9/3/2026, 2:36:44 AMscan output missingContinuous integration
9/2/2026, 2:36:22 AMscan output missingContinuous integration
9/1/2026, 2:21:30 AMscan output missingContinuous integration
8/31/2026, 2:21:22 AMscan output missingContinuous integration
8/30/2026, 2:20:02 AMscan output missingContinuous integration
8/29/2026, 2:17:13 AMscan output missingContinuous integration
8/28/2026, 4:48:28 AMscan output missingContinuous integration
8/27/2026, 3:50:49 AMscan output missingContinuous integration
8/26/2026, 2:33:19 AMscan output missingContinuous integration
8/25/2026, 2:28:17 AMscan output missingContinuous integration
8/24/2026, 2:32:05 AMscan output missingContinuous integration
8/23/2026, 2:32:01 AMscan output missingContinuous integration
8/22/2026, 2:26:13 AMscan output missingContinuous integration

Need additional detail (sanitised report, supporting evidence)? security@theartofcto.com