1
0
mirror of https://github.com/EDCD/EDMarketConnector.git synced 2025-04-12 23:37:14 +03:00
Athanasius 214bed27ee .github: workflows: Guard any shell $VAR with "..."
This is with regards to what happened to another project, ref:

<https://www.wiz.io/blog/ultralytics-ai-library-hacked-via-github-for-cryptomining>

Basically, do NOT trust that things like branch names don't contain any
attempt at executing shell code if referenced in a workflow segment that
runs a shell command.
2024-12-09 21:43:47 +00:00
..
2023-01-26 17:10:53 +00:00
2024-05-02 20:11:07 -04:00