Sanitize GitHub action shell cmd to prevent cmd injection #3509

[hamidonos]

• closes Sanitize GitHub Action input to prevent command injection #3509

Notes:

We use execFileSync to execute shell commands in a a separate child process.

Separate Process:
The child process created by execFileSync runs independently from the main Node.js process. It does not share the same memory or execution context with the parent process, so they do not interfere with each other directly.
If the child process crashes or exits, it won't directly crash the parent Node.js process.

Controlled Input and Output:
The child process has its own stdin, stdout, and stderr streams, and the parent process can choose to interact with them (read/write), but they are isolated unless explicitly connected.
By default, execFileSync captures the output of the child process and returns it to the parent process only after execution completes.

Environment Variables:
The child process runs with its own set of environment variables. You can specify a custom environment for the child process, which is separate from the environment of the parent process.

Every argument is passed separately.

Every shell argument is sanitized independently

Before we pass shell commands and arguments to the child process we sanitize the input parameters.
Sanitization checks for illegal characters and if a argument is a executable command -> if so we throw an error and exit the program

[de-jcup]

Very good work - let's merge it 👍