-
Notifications
You must be signed in to change notification settings - Fork 125
Closed
Labels
needs-triageRequires triage and prioritizationRequires triage and prioritization
Description
Issue Description
Apply ConvertTo-GitHubActionsEscaped from CIHelpers module to all linting scripts that emit workflow commands. This prevents workflow command injection when user-controlled data (file paths, error messages) appears in CI output.
Files to update:
scripts/linting/Invoke-LinkLanguageCheck.ps1scripts/linting/Invoke-PSScriptAnalyzer.ps1scripts/linting/Invoke-YamlLint.ps1scripts/linting/Link-Lang-Check.ps1scripts/linting/Markdown-Link-Check.ps1scripts/linting/Validate-MarkdownFrontmatter.ps1scripts/linting/Modules/LintingHelpers.psm1
Additional Context
Related to PR #354 which introduced the CIHelpers module with escape functions. The escaping approach follows GitHub's official actions/toolkit implementation with additional defense-in-depth for :: sequences.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
needs-triageRequires triage and prioritizationRequires triage and prioritization