devel/zizmor: Add port: Static analysis for GitHub Actions
zizmor is a static analysis tool for CI/CD systems.
It can find and fix security issues in common CI/CD setups, including
GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor
finds:
- Template injection vulnerabilities, leading to attacker-controlled
code execution
- Accidental credential persistence and leakage
- Excessive permission scopes and credential grants to runners
- Impostor commits and confusable git references
- ...and much more!
WWW: https://docs.zizmor.sh/
WWW: https://github.com/zizmorcore/zizmor
lang/babashka: Update to 1.13.222
Changes since 1.13.220:
1.13.222 (2026-09-14)
Read the release blog post:
https://blog.michielborkent.nl/babashka-1.13.222.html
* Fix No :mvn/version specified when resolving dependencies on Jetty
ee9 and ee10 caused by cached POMs sharing dependency management
across versions
* bb nrepl-server writes .nrepl-port on start and removes it on
exit, so bb repl --connect finds the server without an address
* Bump org.babashka/cli to 0.12.91
1.13.221 (2026-09-14)
* Resolve dependencies without a JVM by default. Set :deps-resolver
[74 lines not shown]
