zanadir

Zanadir is a tool designed to analyze CI/CD setups within repositories, providing enhancements and suggestions for security practices and best practices across various supported CI actions including GitHub Actions, CircleCI, and GitLab. It features a repository scanning capability that identifies issues in categories such as software composition analysis, secrets detection, and static application security testing, with customizable output formats including table, JSON, and SARIF for integration with other tools. Contributions to further enhance its features are encouraged within the open-source community.