New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

prevent RCE in the sonar report build #15681

Merged

itsankit-google merged 1 commit into develop from fix-sec-vuln

Aug 5, 2024

Member

itsankit-google commented Aug 5, 2024 •

edited

Loading

Instead of directly interpolating variables into the shell commands, the updated solution writes the environment variables to the $GITHUB_ENV file.
This method ensures that the environment variables are set securely and are less prone to injection attacks.


          prevent RCE in the sonar report build

dd4812e

itsankit-google added the build label

itsankit-google requested a review from sahusanket

August 5, 2024 06:34

sahusanket approved these changes

View reviewed changes

itsankit-google merged commit 4355dc8 into develop

12 of 16 checks passed

itsankit-google deleted the fix-sec-vuln branch

August 5, 2024 08:48

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

build