pj 7f9c5df7db fix(ci): close shell injection into the npm publish job ...

A refname is attacker-controlled and git permits backtick, $, (, ; and |
in it. Three sites substituted it into a run: block, and NODE_AUTH_TOKEN
sat at job level, so a pushed tag ran arbitrary commands with the publish
credential in reach.

The tag now goes through env:, is validated against an anchored version
pattern before anything consumes it, and reaches the other jobs as a job
output. The token is scoped to the publish step. release-npm declares
contents: read instead of inheriting the repo default.

2026-08-16 01:00:40 +05:30

..

scripts

refactor(folio): name the balance property for the bound it asserts

2026-08-15 23:04:15 +05:30

workflows

fix(ci): close shell injection into the npm publish job

2026-08-16 01:00:40 +05:30