Antônio Alexandre Borges Lima 5c9bbe580f fix: prevent CI injection via unsanitized GitHub context interpolation (#12224) ...

Pass github.event.pull_request.head.ref through env: instead of
interpolating it directly into run: shell steps. This prevents bash
from evaluating command substitutions embedded in malicious branch names
before input validation runs.

Co-authored-by: Janardan Singh Kavia <janardankavia@ibm.com>

2026-03-19 19:40:26 +00:00

..

matchers

Update linting workflows for frontend and Python code (#2171)

2024-06-14 06:27:48 -07:00

add-labels.yml

chore: Update outdated GitHub Actions versions (#11316)

2026-01-21 18:38:45 +00:00

auto-update.yml

bugfix: fix api request custom component (#2470)

2024-07-04 05:05:22 -07:00

ci.yml

ci: allow docs-only pull requests to skip tests (#12174)

2026-03-13 16:10:55 +00:00

codeql.yml

ci: bump actions/checkout to v6 (#10697)

2025-11-24 12:27:06 +00:00

community-label.yml

chore: Update outdated GitHub Actions versions (#11316)

2026-01-21 18:38:45 +00:00

conventional-labels.yml

build(deps):(deps): bump Namchee/conventional-pr from 0.15.5 to 0.15.6 (#6059)

2025-02-03 15:21:04 +00:00

create-release.yml

chore: Update outdated GitHub Actions versions (#11316)

2026-01-21 18:38:45 +00:00

cross-platform-test.md

feat: introduce lfx package (#9133)

2025-09-02 17:45:53 +00:00

cross-platform-test.yml

ci: wire pre_release input to cross-platform tests (#11925)

2026-02-26 21:40:02 -05:00

deploy_gh-pages.yml

ci: make docs deployment manual-only (#11602)

2026-02-10 11:48:33 +00:00

deploy-docs-draft.yml

fix: prevent CI injection via unsanitized GitHub context interpolation (#12224)

2026-03-19 19:40:26 +00:00

deploy-storybook.yml

chore: Update outdated GitHub Actions versions (#11316)

2026-01-21 18:38:45 +00:00

docker_test.yml

fix: Clear input fields data operations (#11773)

2026-02-24 03:55:27 +00:00

docker-build-v2.yml

fix: filter Docker Hub tag queries to prevent rc0 overwrite (LE-515) (#12173)

2026-03-12 19:53:57 +00:00

docker-build.yml

chore: use self hosted ephemeral runner (#11253)

2026-02-18 16:29:20 -05:00

docker-nightly-build.yml

chore: use self hosted ephemeral runner (#11253)

2026-02-18 16:29:20 -05:00

docs_test.yml

chore: Update outdated GitHub Actions versions (#11316)

2026-01-21 18:38:45 +00:00

integration_tests.yml

ci: bump actions/checkout to v6 (#10697)

2025-11-24 12:27:06 +00:00

jest_test.yml

chore: Update outdated GitHub Actions versions (#11316)

2026-01-21 18:38:45 +00:00

js_autofix.yml

chore: Update outdated GitHub Actions versions (#11316)

2026-01-21 18:38:45 +00:00

lint-js.yml

chore: Update outdated GitHub Actions versions (#11316)

2026-01-21 18:38:45 +00:00

lint-py.yml

ci: bump actions/checkout to v6 (#10697)

2025-11-24 12:27:06 +00:00

migration-validation.yml

test: add upgrade migration check to ci (#12061)

2026-03-16 15:55:51 +00:00

nightly_build.yml

feat: Add Windows Playwright testing to nightly builds (#12221)

2026-03-19 15:08:54 +00:00

py_autofix.yml

ci: bump actions/checkout to v6 (#10697)

2025-11-24 12:27:06 +00:00

python_test.yml

chore: use self hosted ephemeral runner (#11253)

2026-02-18 16:29:20 -05:00

release_nightly.yml

chore: release nightlies from of release branch (#12181)

2026-03-16 13:21:46 +00:00

release-lfx.yml

chore: Update outdated GitHub Actions versions (#11316)

2026-01-21 18:38:45 +00:00

release.yml

fix: gate PyPI publish jobs on CI completion in release workflow (#12168)

2026-03-12 18:36:51 +00:00

request-docs-review.yml

chore: Update outdated GitHub Actions versions (#11316)

2026-01-21 18:38:45 +00:00

smoke-tests.yml

chore: Update outdated GitHub Actions versions (#11316)

2026-01-21 18:38:45 +00:00

store_pytest_durations.yml

chore: Update outdated GitHub Actions versions (#11316)

2026-01-21 18:38:45 +00:00

style-check-py.yml

ci: bump actions/checkout to v6 (#10697)

2025-11-24 12:27:06 +00:00

template-tests.yml

chore: Update outdated GitHub Actions versions (#11316)

2026-01-21 18:38:45 +00:00

typescript_test.yml

feat: Add Windows Playwright testing to nightly builds (#12221)

2026-03-19 15:08:54 +00:00