CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

devel/zizmor1.31.1

Static analysis for GitHub Actions

0
unaddressed
0
VuXML only, still affected
0
fixed
Maintainer
tagattie@FreeBSD.org
Packages
zizmor 1.31.1
Upstream
up to date
CPE
none, CVEs only via VuXML
WWW
https://docs.zizmor.sh/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (3)

Hiroki Tagato (tagattie) · 1.31.1
devel/zizmor: Update to 1.31.1

While here, simplify shell completions installation.

Changelog:
- https://github.com/zizmorcore/zizmor/releases/tag/v1.31.0
- https://github.com/zizmorcore/zizmor/releases/tag/v1.31.1

Reported by:	GitHub (watch releases)
4e6a9fe110
Mikael Urankar (mikael) · 1.30.1_1
lang/rust: Bump revisions after 1.99.0

PR:		299016
9c878207a1
Hiroki Tagato (tagattie) · 1.30.1
devel/zizmor: Add port: Static analysis for GitHub Actions

zizmor is a static analysis tool for CI/CD systems.

It can find and fix security issues in common CI/CD setups, including
GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor
finds:

- Template injection vulnerabilities, leading to attacker-controlled
  code execution
- Accidental credential persistence and leakage
- Excessive permission scopes and credential grants to runners
- Impostor commits and confusable git references
- ...and much more!

WWW: https://docs.zizmor.sh/
WWW: https://github.com/zizmorcore/zizmor
8922aa980a