mirror of
https://gitea.com/actions/checkout.git
synced 2024-11-14 08:02:27 +08:00
fe77b196f4
The user provided inputs here are vulnerable to script injection. This PR uses an intermediary environment variable to treat the input as a string, rather than as part of the command. See: https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable |
||
---|---|---|
.. | ||
workflows |