Authentication & security
zizmor Open-Source CI Security Scanner
Explore this developer service’s ongoing no-cost allowance, restrictions and official documentation before deploying.
MIT-licensed local CLI for static analysis of GitHub Actions, Dependabot and pre-commit configurations; no vendor scan quota or software subscription fee.
Plan details
What do these plan and deployment labels mean?
- Plan
- Ongoing free allowance
- Deployment model
- Local / embedded
- Credit card
- Not required
- Commercial use
- Allowed
- Added to directory (UTC)
- 2026-11-02
- Last checked
- 2026-10-31
Important restrictions
Runs locally or on user-provided CI runners. GitHub Actions runner minutes may cost money; optional GitHub code-scanning/SARIF upload can require GitHub Advanced Security for private repositories, but CLI scanning does not. This is not a hosted free security scanning service.
Independent community listing, not affiliated with the provider. Always check the latest billing policy and quotas before enabling paid usage.