pro-wh
commented
3 months ago - command injection through PR title
- switch over to shell variable substitution in certain places that used command string interpolation
- switch to a default environment variable https://docs.github.com/en/actions/learn-github-actions/variables#default-environment-variables in a place where we defined our own