Skip to content

Conversation

smockle
Copy link
Collaborator

@smockle smockle commented Oct 13, 2025

This PR backports #10, #11, and #12 from main to the v2 branch.

@smockle smockle requested a review from a team as a code owner October 13, 2025 16:47
Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR backports commits #10, #11, and #12 from the main branch to v2, implementing fixes for shell command injection vulnerabilities and correcting input parameter references.

  • Replaces echo with printf and adds -c flag to jq for safer shell command execution
  • Fixes input parameter name from cached_results to cached_filings

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
action.yml Updates shell command to use printf instead of echo and adds -c flag to jq for security improvements
.github/actions/file/src/index.ts Corrects input parameter name from cached_results to cached_filings

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

@smockle smockle merged commit 9260974 into v2 Oct 13, 2025
5 checks passed
@smockle smockle deleted the smockle/backport-10-and-11 branch October 13, 2025 16:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants