Skip to content

TPT-4056: Fix GitHub Actions script injection vulnerabilities#718

Open
zliang-akamai wants to merge 1 commit into
devfrom
fix/github-actions-script-injection
Open

TPT-4056: Fix GitHub Actions script injection vulnerabilities#718
zliang-akamai wants to merge 1 commit into
devfrom
fix/github-actions-script-injection

Conversation

@zliang-akamai

@zliang-akamai zliang-akamai commented Jul 14, 2026

Copy link
Copy Markdown
Member

📝 Description

Pass workflow dispatch inputs through step-level environment variables to prevent script injection without changing integration-test behavior.

@zliang-akamai zliang-akamai requested review from a team as code owners July 14, 2026 21:20
@zliang-akamai zliang-akamai requested review from ezilber-akamai and psnoch-akamai and removed request for a team July 14, 2026 21:20
@zliang-akamai zliang-akamai changed the title Fix GitHub Actions script injection vulnerabilities TPT-4056: Fix GitHub Actions script injection vulnerabilities Jul 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant