Skip to content

Conversation

@Payback159
Copy link
Collaborator

No description provided.

@github-actions github-actions bot added the github_actions Pull requests that update GitHub Actions code label Sep 16, 2025
- Fix dangerous pull_request_target trigger
- Add persist-credentials: false to checkout steps
- Prevent template injection with environment variables
- Disable cache to prevent poisoning attacks
@Payback159 Payback159 merged commit 1cf5856 into main Sep 16, 2025
13 checks passed
@Payback159 Payback159 deleted the enhance-workflow-security branch September 16, 2025 20:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant