Post #3142661

@trailofbits recently spent several months contributing to zizmor, and wrote up their improvements here: https://blog.trailofbits.com/2026/05/22/we-hardened-zizmors-github-actions-static-analyzer/ This work was really great: they got into some of the low and ugly bits that I’ve been procrastinating on, and in the process made zizmor significantly more correct and useful. Thanks to @DarkaMaul in particular for his hard and thoughtful work on anchors and expression parsing correctness!