Dickson Tsai 068a59e000 Fix shell injection in validate-frontmatter workflow ...

The 'Validate frontmatter' step interpolated step output directly into a
double-quoted shell string, allowing a fork PR that adds a file named
e.g. agents/$(curl ...).md to execute arbitrary commands on the runner.

- Pass the file list via env: and reference as "$FILES" so the shell
  never re-evaluates the contents
- Pass PR number via env: for consistency (no ${{ }} inside run:)
- Gate the job on same-repo PRs only, since fork PRs are auto-closed by
  close-external-prs.yml anyway

Impact was bounded (fork PRs get a read-only token with no secrets), but
this closes the RCE-on-runner vector entirely.

2026-04-27 17:38:18 -07:00

..

scripts

Add auto-SHA-bump workflow for marketplace plugins (#1392)

2026-04-17 09:12:36 -07:00

workflows

Fix shell injection in validate-frontmatter workflow

2026-04-27 17:38:18 -07:00