Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 589f121

Browse files
andrewandrew
committed
New audit: typosquat-uses
1 parent fd14ab6 commit 589f121

12 files changed

Lines changed: 542 additions & 4 deletions

File tree

‎Cargo.lock‎

Lines changed: 32 additions & 4 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎Cargo.toml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -82,6 +82,7 @@ tree-sitter-bash = "0.25.1"
8282
tree-sitter-powershell = "=0.26.3"
8383
tree-sitter-yaml = "0.7.2"
8484
tikv-jemallocator = "0.6"
85+
typomania = { version = "0.1.2", default-features = false }
8586

8687
[workspace.lints.clippy]
8788
dbg_macro = "warn"

‎crates/zizmor/Cargo.toml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -76,6 +76,7 @@ tracing-subscriber = { workspace = true, features = ["env-filter"] }
7676
tree-sitter.workspace = true
7777
tree-sitter-bash.workspace = true
7878
tree-sitter-powershell.workspace = true
79+
typomania.workspace = true
7980
yamlpath.workspace = true
8081
yamlpatch.workspace = true
8182

‎crates/zizmor/data/popular-actions.txt‎

Lines changed: 53 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
8398a7/action-slack
2+
actions/cache
3+
actions/checkout
4+
actions/configure-pages
5+
actions/create-github-app-token
6+
actions/dependency-review-action
7+
actions/deploy-pages
8+
actions/download-artifact
9+
actions/github-script
10+
actions/labeler
11+
actions/setup-dotnet
12+
actions/setup-go
13+
actions/setup-java
14+
actions/setup-node
15+
actions/setup-python
16+
actions/stale
17+
actions/upload-artifact
18+
actions/upload-pages-artifact
19+
astral-sh/setup-uv
20+
aws-actions/configure-aws-credentials
21+
azure/login
22+
codecov/codecov-action
23+
dependabot/fetch-metadata
24+
docker/build-push-action
25+
docker/login-action
26+
docker/metadata-action
27+
docker/setup-buildx-action
28+
docker/setup-qemu-action
29+
dorny/paths-filter
30+
dtolnay/rust-toolchain
31+
github/codeql-action
32+
google-github-actions/auth
33+
google-github-actions/setup-gcloud
34+
goreleaser/goreleaser-action
35+
gradle/actions
36+
hashicorp/setup-terraform
37+
JamesIves/github-pages-deploy-action
38+
mikefarah/yq
39+
ncipollo/release-action
40+
peaceiris/actions-gh-pages
41+
peter-evans/create-pull-request
42+
pnpm/action-setup
43+
pre-commit/action
44+
pypa/gh-action-pypi-publish
45+
release-drafter/release-drafter
46+
ruby/setup-ruby
47+
shivammathur/setup-php
48+
slackapi/slack-github-action
49+
softprops/action-gh-release
50+
step-security/harden-runner
51+
styfle/cancel-workflow-action
52+
Swatinem/rust-cache
53+
tj-actions/changed-files

‎crates/zizmor/src/audit/mod.rs‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -48,6 +48,7 @@ pub(crate) mod self_hosted_runner;
4848
pub(crate) mod stale_action_refs;
4949
pub(crate) mod superfluous_actions;
5050
pub(crate) mod template_injection;
51+
pub(crate) mod typosquat_uses;
5152
pub(crate) mod undocumented_permissions;
5253
pub(crate) mod unpinned_images;
5354
pub(crate) mod unpinned_tools;

0 commit comments

Comments
 (0)