89 | # sigstore-produced signatures and certificates.
90 | run: >-
| _______^
91 | | gh release upload
92 | | '${{ github.ref_name }}' dist/**
93 | | --repo '${{ github.repository }}'
| |__________________________________________^ github.ref_name may expand into attacker-controllable code