otakugeekx@gmail.com Lucas Couto zizmor statically analyses GitHub Actions workflows and composite actions for security problems: template injection, excessive token permissions, credential persistence, unpinned or impostor actions, dangerous triggers and similar CI hardening issues. https://github.com/zizmorcore/zizmor/issues zizmorcore/zizmor