@[email protected] to [email protected] • 3 months agoMalicious code injection by compromised pull request branch namesgithub.comexternal-linkmessage-square14fedilinkarrow-up183arrow-down13
arrow-up180arrow-down1external-linkMalicious code injection by compromised pull request branch namesgithub.com@[email protected] to [email protected] • 3 months agomessage-square14fedilink
minus-square@[email protected]linkfedilink15•3 months agoWhere’s the code that doesn’t quote this properly? I’m guessing it’s Bash.
minus-squareThinkerlink19•3 months agoDing ding ding! We have a winner! It’s a third-party GitHub Action that is passing the branch name directly to Bash. So to be clear, not GitHub’s fault.
Where’s the code that doesn’t quote this properly? I’m guessing it’s Bash.
Ding ding ding! We have a winner!
It’s a third-party GitHub Action that is passing the branch name directly to Bash. So to be clear, not GitHub’s fault.