Skip to content

Commit 59f9cad

Browse files
authored
Merge pull request Homebrew#195936 from miketheman/new-zizmor
zizmor 0.1.1 (new formula)
2 parents bd5d482 + 72c8526 commit 59f9cad

File tree

1 file changed

+42
-0
lines changed

1 file changed

+42
-0
lines changed

Formula/z/zizmor.rb

Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
class Zizmor < Formula
2+
desc "CLI tool for finding security issues in GitHub Actions setups"
3+
homepage "https://github.com/woodruffw/zizmor"
4+
url "https://github.com/woodruffw/zizmor/archive/refs/tags/v0.1.1.tar.gz"
5+
sha256 "d743533d553538b5392ea3bfc45b27d1b55606280babd9418f9cfe7af0273ec0"
6+
license "MIT"
7+
8+
bottle do
9+
sha256 cellar: :any_skip_relocation, arm64_sequoia: "94b500eeef144a39d45dd2c64bcc4a7c038ac6e95b1547bbbe9e239aa2115ef2"
10+
sha256 cellar: :any_skip_relocation, arm64_sonoma: "aae6e1e0b06334ba258ed8c0260c19dd18a121f908eed621eb99379db8b138ee"
11+
sha256 cellar: :any_skip_relocation, arm64_ventura: "f7b195eddd29d8ace5ea9bed88110a01289b701729012a659db877b6b1c83a85"
12+
sha256 cellar: :any_skip_relocation, sonoma: "04d2c86f225b71b76bf83f24825fb262ed9df49f9f0fd559c4723e6e6509cb9d"
13+
sha256 cellar: :any_skip_relocation, ventura: "ce38eace22b227caffc1ac5f58bdcd6f31c7398fe4013f9cb83f798eedf6d5d1"
14+
sha256 cellar: :any_skip_relocation, x86_64_linux: "b636fb59115540ce9bfa1f9e84d7118c8d5903a85cebf6fe7d5dd7a76bc3a20c"
15+
end
16+
17+
depends_on "pkg-config" => :build
18+
depends_on "rust" => :build
19+
20+
on_linux do
21+
depends_on "openssl@3"
22+
end
23+
24+
def install
25+
system "cargo", "install", *std_cargo_args
26+
end
27+
28+
test do
29+
(testpath/"action.yaml").write <<~YAML
30+
on: push
31+
jobs:
32+
vulnerable:
33+
runs-on: ubuntu-latest
34+
steps:
35+
- name: Checkout
36+
uses: actions/checkout@v4
37+
YAML
38+
39+
output = shell_output("#{bin}/zizmor --format plain #{testpath}/action.yaml")
40+
assert_match "does not set persist-credentials: false", output
41+
end
42+
end

0 commit comments

Comments
 (0)