Skip to content
Bringing full YAML anchor support to zizmor
blog.trailofbits.com | blog | #supply-chain | #devsecops | #open-source | #github-actions | #static-analysis | #zizmor | #yaml | #ci-security
Summary
Trail of Bits worked with zizmor maintainers to fix four YAML anchor handling bugs and align its evaluator with GitHub's tests, validating against 41,253 real-world GitHub Actions workflows.
- Published
- Collected