Skip to content

TPT-4056: Fix GitHub Actions script injection vulnerability#87

Open
zliang-akamai wants to merge 1 commit into
mainfrom
fix/github-actions-script-injection
Open

TPT-4056: Fix GitHub Actions script injection vulnerability#87
zliang-akamai wants to merge 1 commit into
mainfrom
fix/github-actions-script-injection

Conversation

@zliang-akamai

@zliang-akamai zliang-akamai commented Jul 14, 2026

Copy link
Copy Markdown
Member

📝 Description

Pass the workflow dispatch input through a step-level environment variable to prevent script injection without changing integration-test behavior.

@zliang-akamai
zliang-akamai requested review from a team as code owners July 14, 2026 21:20
@zliang-akamai
zliang-akamai requested review from jbilskiAkam and mawilk90 and removed request for a team July 14, 2026 21:20
@zliang-akamai zliang-akamai changed the title Fix GitHub Actions script injection vulnerability TPT-4056: Fix GitHub Actions script injection vulnerability Jul 14, 2026
@mawilk90
mawilk90 requested review from ezilber-akamai and removed request for jbilskiAkam July 15, 2026 08:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants