Skip to content

Comments

Backport of remove usage of dynamic GitHub actions variable into release/1.21.x#22811

Closed
hc-github-team-consul-core wants to merge 1 commit intorelease/1.21.xfrom
backport/sanikachavan5/SECVULN-25361-fix-github-workflow-injection/preferably-relaxing-egret
Closed

Backport of remove usage of dynamic GitHub actions variable into release/1.21.x#22811
hc-github-team-consul-core wants to merge 1 commit intorelease/1.21.xfrom
backport/sanikachavan5/SECVULN-25361-fix-github-workflow-injection/preferably-relaxing-egret

Conversation

@hc-github-team-consul-core
Copy link
Collaborator

Backport

This PR is auto-generated from #22725 to be assessed for backporting due to the inclusion of the label backport/1.21.

The below text is copied from the body of the original PR.


Description

use hardcoded names for preventing attacks

Testing & Reproduction steps

Links

PR Checklist

  • updated test coverage
  • external facing docs updated
  • appropriate backport labels added
  • not a security concern

PCI review checklist

  • I have documented a clear reason for, and description of, the change I am making.

  • If applicable, I've documented a plan to revert these changes if they require more than reverting the pull request.

  • If applicable, I've documented the impact of any changes to security controls.

    Examples of changes to security controls include using new access control methods, adding or removing logging pipelines, etc.


Overview of commits

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto approved Consul Bot automated PR

@github-actions github-actions bot added type/ci Relating to continuous integration (CI) tooling for testing or releases theme/contributing Additions and enhancements to community contributing materials labels Sep 22, 2025
@sanikachavan5 sanikachavan5 force-pushed the backport/sanikachavan5/SECVULN-25361-fix-github-workflow-injection/preferably-relaxing-egret branch from dc31d37 to 28dd94b Compare October 24, 2025 06:59
@sanikachavan5 sanikachavan5 requested a review from a team as a code owner October 24, 2025 06:59
@sanikachavan5 sanikachavan5 enabled auto-merge (squash) October 24, 2025 07:00
@github-actions
Copy link

This pull request has been automatically flagged for inactivity because it has not been acted upon in the last 60 days. It will be closed if no new activity occurs in the next 30 days. Please feel free to re-open to resurrect the change if you feel this has happened by mistake. Thank you for your contributions.

@github-actions github-actions bot added the meta/stale Automatically flagged for inactivity by stalebot label Dec 24, 2025
@github-actions
Copy link

Closing due to inactivity. If you feel this was a mistake or you wish to re-open at any time in the future, please leave a comment and it will be re-surfaced for the maintainers to review.

@github-actions github-actions bot closed this Jan 24, 2026
auto-merge was automatically disabled January 24, 2026 01:31

Pull request was closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

meta/stale Automatically flagged for inactivity by stalebot theme/contributing Additions and enhancements to community contributing materials type/ci Relating to continuous integration (CI) tooling for testing or releases

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants