hexcast.
SECURITY

Trail of Bits Fixes YAML Anchor Bugs in zizmor Analyzer

Trail of Bits fixed four YAML anchor bugs in zizmor, a GitHub Actions static analyzer. Working with maintainers, they merged 15 PRs after testing 41,253 workflows from 6,612 repos. Crashes on 45 workflows led to fixes for aliases, duplicates, and deserialization issues (#1557, #1562, #1575, #1732).

BLOG.TRAILOFBITS.COM · MAY 22