About this app
zizmor is a static analysis tool for GitHub Actions.
It can find many common security issues in typical GitHub Actions CI/CD setups, including:
- Template injection vulnerabilities, leading to attacker-controlled code execution
- Accidental credential persistence and leakage
- Excessive permission scopes and credential grants to runners
- Impostor commits and confusable git references
- ...and much more!
Install with Winget
Command line
PS> winget install --id zizmor.zizmor -eCopy command
Official manifest sources
Downloads for version 1.29.0
External links ↗
Installer
Details
SHA-256
Download
x64
github.com
zip
68A6BC6888F10BF0D53658C75885E7C1B7A0588D4C1FBC3F0CA280AD7324BF06
Copy
Download
Version archive
14 older versions
Version 1.28.0
Jul 21, 2026
＋
Installer
Details
SHA-256
Download
x64
github.com
zip
06E5B2345323201ED4C55897651862FEE3B43F79DDCED799F1236F0F0D1C1C0F
Copy
Download
Version 1.27.0
Jul 14, 2026
＋
Installer
Details
SHA-256
Download
x64
github.com
zip
A8C5D02D638BACF9AE5779B08B0291455C67E7E835BE56995F35483518DCD70A
Copy
Download
Version 1.26.0
Jun 21, 2026
＋
Installer
Details
SHA-256
Download
x64
github.com
zip
EB523E90A50A82BA3EFBD79E8C1C53068FBCC504EAA81E9338B678EBA8C3BF46
Copy
Download
Version 1.26.1
Jun 21, 2026
＋
Installer
Details
SHA-256
Download
x64
github.com
zip
C6CEA156935E3B9D36FAECA4FD8F622D23F7A7578DA26ADB34E6456ABD9BEB9A
Copy
Download
Version 1.25.2
May 16, 2026
＋
Installer
Details
SHA-256
Download
x64
github.com
zip
65D46A8144F701200621B580F632076D80D082D60856DE9F88793A95FB5882D7
Copy
Download
Version 1.25.1
May 15, 2026
＋
Installer
Details
SHA-256
Download
x64
github.com
zip
C667587918F9F014A85D7955A87DF59DC87DBC0F50969D8AE19A3DFC403419FD
Copy
Download
Version 1.24.0
Apr 13, 2026
＋
Installer
Details
SHA-256
Download
x64
github.com
zip
0242E8C2B9886ADAB22BB1748D05EF8155D529A4716BCA33080C6F5C2E2C7C11
Copy
Download
Version 1.24.1
Apr 13, 2026
＋
Installer
Details
SHA-256
Download
x64
github.com
zip
B777EC2CB1098139BA74B32E30D11ED149C69AB692D23788C466D4A31704BD4B
Copy
Download
Version 1.23.0
Mar 8, 2026
＋
Installer
Details
SHA-256
Download
x64
github.com
zip
7707DE90A63A516B653A632D7348B1E089BF7F2C5DAF90CC45CBC4661EB324A0
Copy
Download
Version 1.23.1
Mar 8, 2026
＋
Installer
Details
SHA-256
Download
x64
github.com
zip
33C2293FF02834720DD7CD8B47348AAFB2E95A19BDC993C0ECACA9C804ADE92A
Copy
Download
Version 1.22.0
Jan 17, 2026
＋
Installer
Details
SHA-256
Download
x64
github.com
zip
354AD2461D69D255FC7BFB8B359D4486440DF9AE15AF1EFB8F497B9F56F87E74
Copy
Download
Version 1.21.0
Jan 16, 2026
＋
Installer
Details
SHA-256
Download
x64
github.com
zip
978CFAB35E719D91B88966F0964D3A5E86E37EE3AA67EF7C3ED8E29B11886499
Copy
Download
Version 1.20.0
Jan 6, 2026
＋
Installer
Details
SHA-256
Download
x64
github.com
zip
01C11F0E0668AE1A46C015BED9F0EC589440606DA928078F6BCA87354C9FDE2F
Copy
Download
Version 1.19.0
Dec 18, 2025
＋
Installer
Details
SHA-256
Download
x64
github.com
zip
D3C1A4A88953349A05F4B1CB5106537C26E23ED416CE3B56E1D0FDEDC75B9AAD
Copy
Download