Glossary: CI/CD with GitHub Actions
script injection
An attack where untrusted text, such as a pull request title put inside `run:` through `${{ }}`, runs as commands. Pass such text through `env:` instead.
Glossary: CI/CD with GitHub Actions
An attack where untrusted text, such as a pull request title put inside `run:` through `${{ }}`, runs as commands. Pass such text through `env:` instead.