zizmor

import subprocess import os # Ensure zizmor is installed via 'pip install zizmor' and in your PATH. # A GitHub token (GH_TOKEN) is often required for full functionality, # especially for 'online audits' or resolving remote actions. github_token = os.environ.get('GH_TOKEN', '') try: # Run zizmor audit on the current directory ('.') # Replace '.' with your target GitHub Actions workflow directory if different. command = [ "zizmor", "audit", "--target", "." ] if github_token: command.extend(["--github-token", github_token]) print(f"Running command: {' '.join(command)}") process = subprocess.run( command, capture_output=True, text=True, check=False # Set to True if you want an exception on non-zero exit codes ) print("\n--- Zizmor Output ---") print(process.stdout) if process.stderr: print("\n--- Zizmor Errors ---") print(process.stderr) if process.returncode != 0: print(f"\nZizmor exited with non-zero status code: {process.returncode}") else: print("\nZizmor completed successfully.") except FileNotFoundError: print("Error: 'zizmor' command not found. Please ensure zizmor is installed and in your system's PATH.") except Exception as e: print(f"An unexpected error occurred: {e}")