zhanj/claude-code
1
0
Fork 0
mirror of https://github.com/anthropics/claude-code.git synced 2026-05-13 11:32:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: yaml.github-actions.security.run-shell-injection.run-shell-injection security vulnerability (#43824)

Browse Source 
Automated security fix generated by Orbis Security AI

Co-authored-by: Ubuntu <ubuntu@ip-172-31-32-15.us-west-2.compute.internal>
This commit is contained in:
orbisai0security
2026-04-27 19:03:15 +05:30
committed by GitHub
parent 7e936457e4
commit c128568da0
1 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
.github/workflows/claude-dedupe-issues.yml vendored
View File

@@ -38,10 +38,11 @@ jobs:
if: always() if: always()
env: env:
STATSIG_API_KEY: ${{ secrets.STATSIG_API_KEY }} STATSIG_API_KEY: ${{ secrets.STATSIG_API_KEY }}
ISSUE_NUMBER: ${{ github.event.issue.number || inputs.issue_number }}
REPO: ${{ github.repository }}
TRIGGERED_BY: ${{ github.event_name }}
WORKFLOW_RUN_ID: ${{ github.run_id }}
run: | run: |
ISSUE_NUMBER=${{ github.event.issue.number || inputs.issue_number }}
REPO=${{ github.repository }}
if [ -z "$STATSIG_API_KEY" ]; then if [ -z "$STATSIG_API_KEY" ]; then
echo "STATSIG_API_KEY not found, skipping Statsig logging" echo "STATSIG_API_KEY not found, skipping Statsig logging"
exit 0 exit 0
@@ -51,7 +52,8 @@ jobs:
EVENT_PAYLOAD=$(jq -n \ EVENT_PAYLOAD=$(jq -n \
--arg issue_number "$ISSUE_NUMBER" \ --arg issue_number "$ISSUE_NUMBER" \
--arg repo "$REPO" \ --arg repo "$REPO" \
--arg triggered_by "${{ github.event_name }}" \ --arg triggered_by "$TRIGGERED_BY" \
--arg workflow_run_id "$WORKFLOW_RUN_ID" \
'{ '{
events: [{ events: [{
eventName: "github_duplicate_comment_added", eventName: "github_duplicate_comment_added",
@@ -60,7 +62,7 @@ jobs:
repository: $repo, repository: $repo,
issue_number: ($issue_number | tonumber), issue_number: ($issue_number | tonumber),
triggered_by: $triggered_by, triggered_by: $triggered_by,
workflow_run_id: "${{ github.run_id }}" workflow_run_id: $workflow_run_id
}, },
time: (now | floor | tostring) time: (now | floor | tostring)
}] }]