Skip to content

fix(ci): Prevent command injection in ci-metadata workflow #45538

fix(ci): Prevent command injection in ci-metadata workflow

fix(ci): Prevent command injection in ci-metadata workflow #45538

Re-run triggered April 10, 2026 14:59
Status Success
Total duration 3m 53s
Artifacts 35

build.yml

on: pull_request
job_get_metadata  /  Get Metadata
8s
job_get_metadata / Get Metadata
Prepare E2E tests
2m 47s
Prepare E2E tests
Matrix: job_browser_loader_tests
Matrix: job_browser_playwright_tests
Matrix: job_node_core_integration_tests
Matrix: job_node_integration_tests
Matrix: job_node_unit_tests
Matrix: job_remix_integration_tests
Size Check
2m 4s
Size Check
Lint
1m 9s
Lint
Circular Dependency Check
1m 34s
Circular Dependency Check
Upload Artifacts
Upload Artifacts
Browser Unit Tests
1m 35s
Browser Unit Tests
Bun Unit Tests
42s
Bun Unit Tests
Deno Unit Tests
59s
Deno Unit Tests
Cloudflare Integration Tests
1m 28s
Cloudflare Integration Tests
Node Overhead Check
3m 38s
Node Overhead Check
Check for faulty .d.ts files
38s
Check for faulty .d.ts files
Matrix: job_e2e_tests
Matrix: job_optional_e2e_tests
All required jobs passed or were skipped
2s
All required jobs passed or were skipped
Fit to window
Zoom out
Zoom in

Annotations

3 warnings
Remix (Node 22) Tests
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache/restore@v4, actions/download-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Remix (Node 22) Tests
Supported formats: clover, cobertura, jacoco, lcov, istanbul, go, codecov
Remix (Node 22) Tests
No coverage files found

Artifacts

Produced during runtime
Name Size Digest
codecov-test-results-fix-vuln-1328-ci-metadata-injection-job_remix_integration_tests-22
232 Bytes
sha256:5b7a19487bdcde7cb02e023401a50cce32c63180c3e64d79f559f426ea14997c