Files
fix-it-felix-sentry[bot]fix-it-felix-sentry[bot] <260785270+fix-it-felix-sentry[bot]@users.noreply.github.com>Andrei Borza
b5f4d3a7a8 fix: Prevent shell injection in build workflow (#319)
* fix: Prevent shell injection in build workflow

Use environment variables to safely handle github context data
in run steps to prevent potential code injection attacks.

Fixes https://linear.app/getsentry/issue/VULN-1601
Fixes https://linear.app/getsentry/issue/ENG-7567

Co-Authored-By: fix-it-felix-sentry[bot] <260785270+fix-it-felix-sentry[bot]@users.noreply.github.com>

* Use in-built env vars instead of redefining them

---------

Co-authored-by: fix-it-felix-sentry[bot] <260785270+fix-it-felix-sentry[bot]@users.noreply.github.com>
Co-authored-by: Andrei Borza <[email protected]>
2026-04-30 15:01:47 +09:00
..