cozystack

admin/cozystack

0 Fork 0

mirror of https://github.com/cozystack/cozystack.git synced 2026-11-09 14:02:56 +09:00

Files

T

History

Myasnikov DaniilandClaude Opus 4.8 076658e70f fix(ci): avoid zizmor github-env finding on fork e2e sandbox name

The `Set sandbox ID` step wrote a computed value to $GITHUB_ENV, which the
zizmor github-env audit flags as high severity (write to GITHUB_ENV may allow
code execution). Set SANDBOX_NAME as a job-level env var instead — no
$GITHUB_ENV write, so the audit does not apply. Uses github.run_id, which is
unique per run; in workflow_run context GITHUB_REF is the default branch and
cannot disambiguate concurrent fork runs sharing a self-hosted host.

Refs: #3257

Assisted-By: Claude <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: Myasnikov Daniil <myasnikovdaniil2001@gmail.com>

2026-07-29 17:47:26 +05:00

ISSUE_TEMPLATE

chore(github): auto-label new issues triage/needs-triage

2026-07-16 20:10:20 +03:00

workflows

fix(ci): avoid zizmor github-env finding on fork e2e sandbox name

2026-07-29 17:47:26 +05:00

actionlint.yaml

ci(build): parallelize PR image builds into a per-package matrix

2026-06-22 20:08:51 +05:00

CODEOWNERS

docs(security): align security docs with current controls for incubation DD