Skip to content

Conversation

@akhera99
Copy link
Member

Moved all output values to env: so they are treated as runtime data rather than parsed as shell code

@akhera99 akhera99 requested a review from a team as a code owner February 12, 2026 23:10
@akhera99 akhera99 merged commit e678dff into dotnet:main Feb 12, 2026
3 of 4 checks passed
@dotnet-policy-service dotnet-policy-service bot added this to the Next milestone Feb 12, 2026
@phil-allen-msft phil-allen-msft changed the title Fix vulnerability in pr-validation workflow Treat output values as runtime data Feb 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants