asyncapi / .github

Location of all reusable community health files

29 stars 62 forks source link

Open mhmohona opened 5 months ago

mhmohona commented 5 months ago

Description

Updated GitHub Actions workflow to pass potentially untrusted data through environment variables as per GitHub's security hardening guidelines.
Ensured that titles used in email notifications are now set via environment variables to prevent script injection attacks.

Related issue(s)

257

mhmohona commented 5 months ago

I have a concern on it.

After running the actionlit for this repo it was the output -

For first 2 errors, when I tested the scripts in https://rhysd.github.io/actionlint/, it didnt catch them.

If i address them, then both from actionlit online site and IDE I get error.

Should I address 1st 2 errors then? Or probably its a bug. :3

derberg commented 3 months ago

@mhmohona do you plan to continue with this one?

derberg commented 2 months ago

@mhmohona do you plan to continue with this one or should we ask community to continue?