File tree Expand file tree Collapse file tree 1 file changed +42
-0
lines changed
Expand file tree Collapse file tree 1 file changed +42
-0
lines changed Original file line number Diff line number Diff line change 1+ class Zizmor < Formula
2+ desc "CLI tool for finding security issues in GitHub Actions setups"
3+ homepage "https://github.com/woodruffw/zizmor"
4+ url "https://github.com/woodruffw/zizmor/archive/refs/tags/v0.1.1.tar.gz"
5+ sha256 "d743533d553538b5392ea3bfc45b27d1b55606280babd9418f9cfe7af0273ec0"
6+ license "MIT"
7+
8+ bottle do
9+ sha256 cellar : :any_skip_relocation , arm64_sequoia : "94b500eeef144a39d45dd2c64bcc4a7c038ac6e95b1547bbbe9e239aa2115ef2"
10+ sha256 cellar : :any_skip_relocation , arm64_sonoma : "aae6e1e0b06334ba258ed8c0260c19dd18a121f908eed621eb99379db8b138ee"
11+ sha256 cellar : :any_skip_relocation , arm64_ventura : "f7b195eddd29d8ace5ea9bed88110a01289b701729012a659db877b6b1c83a85"
12+ sha256 cellar : :any_skip_relocation , sonoma : "04d2c86f225b71b76bf83f24825fb262ed9df49f9f0fd559c4723e6e6509cb9d"
13+ sha256 cellar : :any_skip_relocation , ventura : "ce38eace22b227caffc1ac5f58bdcd6f31c7398fe4013f9cb83f798eedf6d5d1"
14+ sha256 cellar : :any_skip_relocation , x86_64_linux : "b636fb59115540ce9bfa1f9e84d7118c8d5903a85cebf6fe7d5dd7a76bc3a20c"
15+ end
16+
17+ depends_on "pkg-config" => :build
18+ depends_on "rust" => :build
19+
20+ on_linux do
21+ depends_on "openssl@3"
22+ end
23+
24+ def install
25+ system "cargo" , "install" , *std_cargo_args
26+ end
27+
28+ test do
29+ ( testpath /"action.yaml" ) . write <<~YAML
30+ on: push
31+ jobs:
32+ vulnerable:
33+ runs-on: ubuntu-latest
34+ steps:
35+ - name: Checkout
36+ uses: actions/checkout@v4
37+ YAML
38+
39+ output = shell_output ( "#{ bin } /zizmor --format plain #{ testpath } /action.yaml" )
40+ assert_match "does not set persist-credentials: false" , output
41+ end
42+ end
You can’t perform that action at this time.
0 commit comments