mirror of
https://github.com/astral-sh/ruff
synced 2026-01-20 21:10:48 -05:00
b6562ed57e
## Summary
See title. Had to make a minor change, because it failed the zizmor
pre-commit check otherwise:
```
error[template-injection]: code injection via template expansion
--> /home/shark/ruff/.github/workflows/daily_fuzz.yaml:68:9
|
68 | - uses: actions/github-script@v7
| __________^
69 | | with:
70 | | github-token: ${{ secrets.GITHUB_TOKEN }}
71 | | script: |
| | ___________^
72 | || await github.rest.issues.create({
... ||
77 | || labels: ["bug", "parser", "fuzzer"],
78 | || })
| || ^
| ||_______________|
| |_______________this step
| github.server_url may expand into attacker-controllable code
|
= note: audit confidence → High
```