Skip to content

v0.1.110

Choose a tag to compare

View all tags
@grnbtqdbyx-create grnbtqdbyx-create released this 01 Jun 14:17
· 4 commits to main since this release
v0.1.110
2d839e1

What changed

  • Added fixtures/action-malicious-inputs.json with quote, newline, command-substitution, shell-separator, and environment-file-looking Action input cases.
  • Extended the composite Action regression test so user-controlled inputs must stay out of run: shell scripts and pass through INPUT_* environment variables.
  • Updated README/use-case docs and published examples to v0.1.110.

Verification

  • npm run check
  • npm audit --omit=dev
  • npm pack --dry-run --json
  • GitHub Actions CI: success on 2d839e1
  • Codex Readiness: success on 2d839e1
Assets 2
Loading