Issues

• Feature: Allow excluding specific repositories from online audits (ref-confusion, known-vulnerable-actions)

  enhancementtriage
  zizmorcore/zizmor#2449 · Filter by author gk-younes opened on Oct 15, 2026
  1

• [BUG]: ref-version-mismatch and stale-action-refs don't respect ignore outside of steps

  bugtriage
  zizmorcore/zizmor#2443 · Filter by author hashcatHitman opened on Oct 14, 2026

• [BUG]: ref-version-mismatch false positive when version comment is followed by another comment (e.g. yamllint/ryl directive)

  bugtriage
  zizmorcore/zizmor#2433 · Filter by author Winipedia opened on Oct 5, 2026
  2

• Simplify cache-poisoning autofixes

  autofixenhancement
  zizmorcore/zizmor#2427 · Filter by author woodruffw opened on Oct 2, 2026
  1

• [BUG]: zizmor can't parse expressions with escaped single quotes in single-quoted YAML scalars

  bug
  zizmorcore/zizmor#2422 · Filter by author bayandin opened on Sep 30, 2026
  7

• Feature: Flag to store/retrive GitHub API token from system keyring

  enhancementtriage
  zizmorcore/zizmor#2403 · Filter by author hashcatHitman opened on Sep 21, 2026
  5

• [BUG]: ref-version-mismatch check doesn't take cooldown in consideration

  bugneeds-decision
  zizmorcore/zizmor#2378 · Filter by author alexander-kjall-hafslundeco opened on Sep 9, 2026
  1

• Feature: support actions lockfiles

  enhancement
  zizmorcore/zizmor#2371 · Filter by author jessehouwing opened on Sep 8, 2026 · 1.32.0
  15

• Audits should be able to spot findings based on indirect matrix expansions

  enhancement
  zizmorcore/zizmor#2366 · Filter by author ubiratansoares opened on Sep 5, 2026 · 1.32.0
  2

• Running in offline mode within GitHub Actions CI

  question
  zizmorcore/zizmor#2359 · Filter by author CarrotManMatt opened on Sep 1, 2026
  8

• Feature: support msys2 as bash

  enhancementneeds-design
  zizmorcore/zizmor#2343 · Filter by author Omikorin opened on Aug 28, 2026
  3

• New audit: big shell blocks

  new-audit
  zizmorcore/zizmor#2323 · Filter by author woodruffw opened on Aug 19, 2026

• New audit: shell-syntax

  zizmorcore/zizmor#2322 · Filter by author woodruffw opened on Aug 19, 2026
  6

  

• Feature: Create a "documentation improvement" GitHub issue template

  documentationenhancement
  zizmorcore/zizmor#2309 · Filter by author trueberryless opened on Aug 14, 2026
  1

• Feature: Enable show_audit_urls for GitHub output format as well

  question
  zizmorcore/zizmor#2296 · Filter by author deiga opened on Aug 11, 2026
  1

• New audit: overly broad tag patterns

  enhancementnew-audit
  zizmorcore/zizmor#2294 · Filter by author woodruffw opened on Aug 10, 2026
  

• Bug: autofixes for unpinned-uses and known-vulnerable-actions don't converge in one run

  autofixbug
  zizmorcore/zizmor#2286 · Filter by author woodruffw opened on Aug 10, 2026

• Support prek.toml

  long-term
  zizmorcore/zizmor#2260 · Filter by author woodruffw opened on Aug 2, 2026

• Feature: unpinned image in services

  question
  zizmorcore/zizmor#2257 · Filter by author oleg-andreyev opened on Aug 2, 2026
  1

• [META] pre-commit audit parity

  meta
  zizmorcore/zizmor#2256 · Filter by author woodruffw opened on Aug 2, 2026 · 1.32.0
  9

• Support rule aliases

  configenhancement
  zizmorcore/zizmor#2232 · Filter by author woodruffw opened on Jul 24, 2026
  

• Feature: Handle 503/500s from GitHub

  enhancement
  zizmorcore/zizmor#2210 · Filter by author jsoref opened on Jul 20, 2026
  1

• Feature: Improve output when scanning multiple remote actions

  enhancementneeds-decision
  zizmorcore/zizmor#2203 · Filter by author martenkr opened on Jul 17, 2026
  4

• Feature: Distribute to other package ecosystems?

  enhancementneeds-decisionpackaging
  zizmorcore/zizmor#2194 · Filter by author KTrain5169 opened on Jul 15, 2026
  4

• Generate JSON schema for our JSON (v1) output

  enhancement
  zizmorcore/zizmor#2190 · Filter by author woodruffw opened on Jul 14, 2026