Daniel Hast 67c050bb8e ci: use env vars to avoid template expansion in code contexts ... Template expansions are not aware of shell script syntax, and therefore can potentially result in code injection vulnerabilities when used in code contexts: https://docs.zizmor.sh/audits/#template-injection To avoid this, instead use environment variables to safely store the values of the template expansions. Also (in the process of doing the above) added double-quotes around a some instances of variable expansions in shell scripts, which is necessary to avoid unintended shell splitting and globbing. (I didn't see any instances where this was actually likely to result in erroneous behavior, but it's good practice and makes shell scripts more robust.) Signed-off-by: Daniel Hast <hast.daniel@protonmail.com>		2025-12-01 08:43:09 -05:00
..
actions/check_cirrus_cron	GHA: Fix bad job-names & links in monitoring emails	2023-06-07 15:22:17 -04:00
ISSUE_TEMPLATE	Enhance issue reporting template	2025-03-31 09:41:01 -05:00
workflows	ci: use env vars to avoid template expansion in code contexts	2025-12-01 08:43:09 -05:00
issue-labeler.yml	github: label issues based on os fix regex	2022-01-27 21:24:34 +01:00
ISSUE_TEMPLATE.md	Update the issue templates	2022-11-30 14:06:29 -05:00
labeler.yml	.github/labeler: add governance label automatically	2025-04-08 19:40:35 +02:00
PULL_REQUEST_TEMPLATE.md	Update gh pull request template	2025-10-30 08:58:28 -05:00
renovate.json5	Detect and fix typos using codespell	2024-09-05 13:56:39 -04:00