Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion doc/source/how-to/vulnerabilities.rst
Original file line number Diff line number Diff line change
Expand Up @@ -622,7 +622,7 @@ Fixing it is important because malicious inputs could execute unintended command
run: |
echo ${{ github.workspace }} # Template expansions are resolved before workflows and jobs run. These expansions
echo ${{ runner.temp }} # insert their results directly into the context, which can accidentally introduce shell injection risks.
echo ${{ input.user-input }} # This is especially through when such expansion is from a user input.
echo ${{ input.user-input }} # This is especially true when such expansion is from a user input.


.. tab-item:: Remediation
Expand Down
Loading