ngmi / zizmorcore / zizmor

zizmorcore/zizmor

Rust 3.7k stars

Static analysis for GitHub Actions

✓ Synced 3h ago Share on X →
README badge: [![ngmi](https://ngmi.review/badge/zizmorcore/zizmor.svg)](https://ngmi.review/repo/zizmorcore/zizmor)
1.1k Merged PRs
17.2h Avg Merge Time
0m Fastest PR
2 months Slowest PR
#348 Global Speed Rank
Trim top 0% outliers

Trends Over Time

Monthly aggregates for this repo. The gap between avg and median reveals outlier skew.

PR size over time (lines changed)
Review time over time (hrs)
Changes requested rate over time (%)
Merged PRs per month
Time to first review (hrs)
Unreviewed merge rate (%)

PR Size Analysis

Lines changed (additions + deletions) vs review outcomes.

PRs by size
Avg review time (hrs)
Clean approval rate (%)

Top Reviewers

#1 @woodruffw
@woodruffw
456 reviews ✓ 168 approved ↺ 3 blocked
#2 @mostafa
@mostafa
66 reviews ✓ 1 approved
#3 @ubiratansoares
@ubiratansoares
52 reviews
#4
@Marcono1234
14 reviews
#5 @funnelfiasco
@funnelfiasco
8 reviews ✓ 4 approved
#6 @joewallwork
@joewallwork
7 reviews
#7
@Bo98
6 reviews ✓ 2 approved
#8
@andrewpollack
5 reviews
#9 @reubenwong97
@reubenwong97
5 reviews
#10
@trumant
5 reviews

Recent Merged PRs

# Title Author Time Reviews Blocks
#1653 chore(deps): bump the github-actions group with 2 updates @dependabot 50m 0 ✓
#1651 zizmor 1.23.0-rc1 @woodruffw 2m 0 ✓
#1650 github-actions-expressions 0.0.13 @woodruffw 2m 0 ✓
#1649 github-actions-models 0.44.0 @woodruffw 2m 0 ✓
#1648 yamlpatch 0.12.0 @woodruffw 2m 0 ✓
#1647 yamlpath 0.34.0 @woodruffw 2m 0 ✓
#1646 Tweak release workflow triggers @woodruffw 2m 0 ✓
#1645 Allow github.triggering_actor by default in template-injection @woodruffw 9m 0 ✓
#1640 fix(known-vulnerable-actions): report fix instead of early exit on fail @reubenwong97 2 days 9 ✓
#1644 Bump trophies @woodruffw 2m 0 ✓
#1643 Fix release note section @woodruffw 2m 0 ✓
#1641 feat(gh-token): add support for ZIZMOR_GITHUB_TOKEN @reubenwong97 11.0h 4 ✓
#1637 Add new pre-commit Dependabot PackageEcosystem @shenanigansd 18m 3 ✓
#1632 chore(deps): bump time from 0.3.44 to 0.3.47 @dependabot 11m 0 ✓
#1633 chore(deps): bump bytes from 1.10.1 to 1.11.1 @dependabot 10m 0 ✓
#1631 Bump trophies @woodruffw 2m 0 ✓
#1630 Regenerate snapshots @woodruffw 2m 0 ✓
#1622 chore(deps): bump the cargo group with 9 updates @dependabot 22.7h 0 ✓
#1623 chore(deps): bump the github-actions group with 2 updates @dependabot 3.4h 0 ✓
#1620 Don't flag missing concurrency on reusable-only workflows @woodruffw 19m 0 ✓