feat: refine action for enhanced security - #40

Merged

tdruez merged 9 commits into

mainfrom

workflows-security

Mar 27, 2026

Commits on Mar 27, 2026

pin-down actions used in the action itself
tdruez
committed
fcad426
move ${{ inputs.* }} into env: mappings to prevent script injection
tdruez
committed
790f3e1
remove eval in compliance step
tdruez
committed
fdfa978
add path traversal guard
tdruez
committed
b04bda5
add URL scheme validation
tdruez
committed
0dd36d5
harden shell quoting
tdruez
committed
4e92eaa
attempt to fix the d2d template
tdruez
committed
b07707d
attempt to fix the d2d template
tdruez
committed
11d8766
turn off the d2d workflow for now
tdruez
committed
df3597d