fix(security): prevent GitHub Actions expression injection in build workflows (CWE-94) - #174

Merged

Ganeshkumar Ashokavardhanan (ganeshkumarashok) merged 2 commits into

mainfrom

fix/actions-expression-injection

Aug 6, 2026

Commits on Jul 29, 2026

fix(security): use env indirection for expressions in workflow shells (CWE-94)

Ganeshkumar Ashokavardhanan (ganeshkumarashok)
and
Copilot
committed
7fafe47

Commits on Aug 6, 2026

Merge main into fix/actions-expression-injection

Ganeshkumar Ashokavardhanan (ganeshkumarashok)
and
Copilot
committed
e40237f