Daniel Hast 67c050bb8e ci: use env vars to avoid template expansion in code contexts ... Template expansions are not aware of shell script syntax, and therefore can potentially result in code injection vulnerabilities when used in code contexts: https://docs.zizmor.sh/audits/#template-injection To avoid this, instead use environment variables to safely store the values of the template expansions. Also (in the process of doing the above) added double-quotes around a some instances of variable expansions in shell scripts, which is necessary to avoid unintended shell splitting and globbing. (I didn't see any instances where this was actually likely to result in erroneous behavior, but it's good practice and makes shell scripts more robust.) Signed-off-by: Daniel Hast <hast.daniel@protonmail.com>		2025-12-01 08:43:09 -05:00
..
check_cirrus_cron.yml	ci: pin 3rd-party action dependencies by commit hashes	2025-12-01 08:41:55 -05:00
dev-bump.yml	ci: use env vars to avoid template expansion in code contexts	2025-12-01 08:43:09 -05:00
first_contrib_cert_generator.yml	ci: use env vars to avoid template expansion in code contexts	2025-12-01 08:43:09 -05:00
issue-labeler.yml	[skip-ci] Update github/issue-labeler action to v3.4	2024-02-02 23:24:07 +00:00
issue_pr_lock.yml	ci: pin 3rd-party action dependencies by commit hashes	2025-12-01 08:41:55 -05:00
labeler.yml	ci: specify workflow permissions per job	2025-12-01 08:42:39 -05:00
mac-pkg.yml	ci: use env vars to avoid template expansion in code contexts	2025-12-01 08:43:09 -05:00
machine-os-pr.yml	ci: use env vars to avoid template expansion in code contexts	2025-12-01 08:43:09 -05:00
needs-info-labeler.yaml	ci: specify workflow permissions per job	2025-12-01 08:42:39 -05:00
release-artifacts.yml	ci: use env vars to avoid template expansion in code contexts	2025-12-01 08:43:09 -05:00
release.yml	ci: use env vars to avoid template expansion in code contexts	2025-12-01 08:43:09 -05:00
stale.yml	[skip-ci] Update actions/stale action to v10	2025-09-04 09:11:18 +00:00
update-podmanio.yml	ci: use env vars to avoid template expansion in code contexts	2025-12-01 08:43:09 -05:00
upload-win-installer.yml	ci: use env vars to avoid template expansion in code contexts	2025-12-01 08:43:09 -05:00