crickets-and-comb / crickets-and-comb/shared

Better sanitize workflow inputs.

Open
#94 0 comments 0 reactions 0 assignees View on GitHub
bug help wanted
Dominant language
Makefile
Stars
2
Forks
0
PR merge metrics
No merged PRs in 30d

Description

GitHub workflow inputs here and in other repos within the org aren't always fully sanitized. There should already be a sanitization step at the beginning of every workflow that wraps the inputs into environment variables that the rest of the workflow uses. Some of them already apply regex or other methods to ensure there's nothing nefarious being injected, but many do not. Many simply pass the inputs along as-is.

Task:

Go through each and every workflow that takes inputs with at least one of its triggers, in this repo and the rest of the repos. Apply regex and any other validations or transformations (e.g., stripping whitespace, ensuring a version follows semantic versioning regex pattern, etc.) within the sanitization step before assigning the variable to the output.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.