Skip to content

[generate_manifest] let issue creation trigger the workflow - #245

Merged
GabrielDrapor merged 2 commits into
mainfrom
Jiarui/smart-registry-workflow
Aug 20, 2025
Merged

[generate_manifest] let issue creation trigger the workflow#245
GabrielDrapor merged 2 commits into
mainfrom
Jiarui/smart-registry-workflow

Potential fix for code scanning alert no. 10: Code injection

65462f4
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Aug 20, 2025 in 4s

2 new alerts including 2 critical severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 2 critical

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 67 in .github/workflows/generate-manifest.yml

See this annotation in the file changed.

Code scanning / CodeQL

Code injection Critical

Potential code injection in
${ github.event.inputs.repo_url || github.event.client_payload.repo_url || steps.extract-url.outputs.repo_url }
Loading
, which may be controlled by an external user (
issues
Loading
).

Check failure on line 73 in .github/workflows/generate-manifest.yml

See this annotation in the file changed.

Code scanning / CodeQL

Code injection Critical

Potential code injection in
${ github.event.inputs.repo_url || github.event.client_payload.repo_url || steps.extract-url.outputs.repo_url }
Loading
, which may be controlled by an external user (
issues
Loading
).