pj 7f9c5df7db fix(ci): close shell injection into the npm publish job ...

A refname is attacker-controlled and git permits backtick, $, (, ; and |
in it. Three sites substituted it into a run: block, and NODE_AUTH_TOKEN
sat at job level, so a pushed tag ran arbitrary commands with the publish
credential in reach.

The tag now goes through env:, is validated against an anchored version
pattern before anything consumes it, and reaches the other jobs as a job
output. The token is scoped to the publish step. release-npm declares
contents: read instead of inheriting the repo default.

2026-08-16 01:00:40 +05:30

..

ci.yml

Merge branch 'sidecar-adb-and-ime' into trial-merge

2026-08-15 21:37:00 +05:30

docs.yml

ci: move every action off the node20 runtime

2026-08-15 20:41:39 +05:30

folio.yml

Merge branch 'ci-hygiene-and-fmt' into trial-merge

2026-08-15 20:49:20 +05:30

release.yml

fix(ci): close shell injection into the npm publish job

2026-08-16 01:00:40 +05:30

replay-ui.yml

ci: move every action off the node20 runtime

2026-08-15 20:41:39 +05:30