Ousama Ben Younes fb8c9dbdbe fix: prevent shell injection in summary workflow (#1285) ...

The gh issue comment command was interpolating the LLM response via
${{ steps.inference.outputs.response }} directly in the shell, allowing
single-quote escaping if the response contained untrusted content.
RESPONSE was already declared as an env var but unused — now using it.

Closes #1285

Co-Authored-By: Claude <noreply@anthropic.com>

2026-04-01 05:13:53 +00:00

..

claude-code-review.yml

Upgrade GitHub Actions for Node 24 compatibility (#876)

2026-02-16 00:26:31 -05:00

claude.yml

Upgrade GitHub Actions for Node 24 compatibility (#876)

2026-02-16 00:26:31 -05:00

convert-feature-requests.yml

Upgrade GitHub Actions for Node 24 compatibility (#876)

2026-02-16 00:26:31 -05:00

deploy-install-scripts.yml

fix: mkdir -p install/public before copying scripts in deploy workflow

2026-02-13 01:40:25 -05:00

npm-publish.yml

ci: add npm publish workflow on tag push

2026-02-14 17:06:24 -05:00

summary.yml

fix: prevent shell injection in summary workflow (#1285)

2026-04-01 05:13:53 +00:00