Repository Issue Activity (beta)

zizmorcore/zizmor

Current issue state, recent activity, and per-issue timelines from the indexed issue data.

Open Issues
137
New in 7 Days
11
Closed in 7 Days
10
Average Open Age
286 days
Stale 30+ Days
105
Stale 90+ Days
81
Last 2 Weeks
DateOpenedClosedCommentsEventsOpen Backlog
2026-09-1200001
2026-09-11369315
2026-09-100000140
2026-09-0923000
2026-09-0820000
2026-09-0710000
2026-09-0610000
2026-09-0521000
2026-09-0402000
2026-09-0321000
2026-09-0200000
2026-09-0120000
2026-08-3100000
2026-08-3000000
This Week

Opened: 9

Closed: 9

Comments: 9

Events: 31

Top Labels
enhancement (253)
bug (211)
new-audit (56)
triage (47)
cli (36)
wolfi-zizmor-bump (32)
duplicate (29)
false-positive (29)
Issue Explorer
IssueAuthorStateLabelsCommentsReactionsUpdated

#2382 Feature: Syntax check for workflow files

Opened 2 days ago
SzilvasiPeter
closed - duplicate
duplicate
101 day ago

#2301 [BUG]: `cache-poisoning` per-file `ignore` config stops working when the workflow file is named `pre-commit.yml`

Opened 1 month ago
alihamdan
closed - not_planned
needs-mre
602 days ago

#2381 [BUG]: `zizmor` discovers the wrong `zizmor.yml` when run inside a git submodule

Opened 2 days ago
alihamdan
open
bug
triage
002 days ago

#2380 Support GitHub's new cache-mode

Opened 2 days ago
woodruffw
open
No labels
022 days ago

#2366 Audits should be able to spot findings based on indirect matrix expansions

Opened 7 days ago
ubiratansoares
open
enhancement
102 days ago

#2072 Feature: runner policies

Opened 4 months ago
dbermuehler
closed - completed
enhancement
new-audit
sponsorable:5k
212 days ago

#327 self-hosted-runner: detect Github large runners

Opened 2 years ago
ubiratansoares
closed - completed
enhancement
302 days ago

#286 self-hosted-runner: detect non-GH runners that don't use `self-hosted`

Opened 2 years ago
woodruffw
closed - completed
enhancement
false-negative
602 days ago

#2371 Feature: support actions lockfiles

Opened 4 days ago
jessehouwing
open
enhancement
302 days ago

#2378 [BUG]: ref-version-mismatch check doesn't take cooldown in consideration

Opened 4 days ago
alexander-kjall-hafslundeco
open
bug
102 days ago

#2379 [BUG]: zizmor 1.30.x fails to load astropy's .pre-commit-config.yaml

Opened 3 days ago
neutrinoceros
closed - duplicate
duplicate
112 days ago

#479 New audit: repojacking

Opened 2 years ago
woodruffw
open
enhancement
help wanted
good first issue
902 days ago

#2368 [BUG]: Unable to ignore warnings in pre-commit config

Opened 6 days ago
MrShark
closed - completed
question
204 days ago

#2367 [BUG]: self-repository auto-fix should be classified as "unsafe"

Opened 6 days ago
martinpitt
closed - completed
bug
autofix
114 days ago

#2372 Feature: Add support for immutable tags

Opened 4 days ago
jessehouwing
closed - duplicate
enhancement
triage
104 days ago

#2071 Feature: cache-poisoning for heuristic for release event

Opened 4 months ago
danyeaw
open
enhancement
false-positive
404 days ago

#2365 Feature: Allowing the input path to be set in the config file

Opened 8 days ago
Winipedia
closed - not_planned
config
out-of-scope
407 days ago

#2325 unpinned-tools: detect extractions/setup-just

Opened 23 days ago
woodruffw
closed - completed
enhancement
327 days ago

#2358 [BUG]: 1.30 regression in git repo lookup from pre-commit config

Opened 11 days ago
Luap99
closed - completed
bug
308 days ago

#2359 Running in offline mode within GitHub Actions CI

Opened 11 days ago
CarrotManMatt
open
question
808 days ago

#2361 [BUG]: template-injection autofix inserts ${VAR} into single-quoted shell strings, suppressing expansion

Opened 10 days ago
0xCyr
closed - duplicate
duplicate
109 days ago

#2362 Three RUSTSEC advisories in the dependency tree (crossbeam-epoch, h2, memmap2)

Opened 10 days ago
cx-natan-danovich
closed - not_planned
No labels
1010 days ago

#738 Feature: `unpinned-images` could discover `docker pull ...` patterns in `run:` clauses

Opened 1 year ago
woodruffw
open
enhancement
2013 days ago

#1619 [BUG]: `concurrency-limits` does not flag caller workflows where all jobs are reusable workflow calls

Opened 7 months ago
johnbillion
open
bug
false-negative
2013 days ago

#1865 [BUG]: False positive `superfluous-actions` for `dtolnay/rust-toolchain` on self-hosted runner

Opened 5 months ago
AntoineSebert
open
bug
1013 days ago

Rows per page:

1–25 of 699