Alessandro Gario
banner
alessandrogario.bsky.social
Alessandro Gario
@alessandrogario.bsky.social
Lecturer in Approximate Accuracy,

#osquery Technical Steering Committee member
Reposted by Alessandro Gario
Reposted by Alessandro Gario
zizmor v1.12.0 is released!

this release comes with one new audit (unsound-condition), support for auto-fixing three more finding classes, plus much more in the way of general enhancements and bug fixes.

full details here:

docs.zizmor.sh/release-note...
Release Notes - zizmor
Abbreviated change notes about each zizmor release.
docs.zizmor.sh
August 13, 2025 at 4:13 PM
Reposted by Alessandro Gario
zizmor v1.11.0 is out! this release comes with experimental LSP support and an accompanying vscode extension:

marketplace.visualstudio.com/items?itemNa...

full release notes here: docs.zizmor.sh/release-note...
June 30, 2025 at 7:33 PM
Reposted by Alessandro Gario
Reposted by Alessandro Gario
final update to this Ultralytics saga:

blog.yossarian.net/2024/12/06/z...
December 8, 2024 at 3:04 AM
Reposted by Alessandro Gario
conclusions from today's live writeup of the ultralytics vulnerability:

blog.yossarian.net/2024/12/06/z...
December 6, 2024 at 9:37 PM
Reposted by Alessandro Gario
zizmor would have caught the Ultralytics workflow vulnerability https://blog.yossarian.net/2024/12/06/zizmor-ultralytics-injection #security #oss
December 6, 2024 at 5:40 PM