yext / answers-search-ui / 14446332607

62%

master: 62%

push

github

Merge master (v1.18.1) into develop (#1927)

* Remove run shell injection vulnerability (#1926)

Prevents attackers from injecting their own code into the github actions runner using variable interpolation to steal screts and code. We now use an intermediate environment variable to store input data.

* Remove run shell injection vulnerability (pt 2) (#1928)

Prevents attackers from injecting their own code into the github actions runner using variable interpolation to steal secrets and code. We now use an intermediate environment variable to store input data (pt 2).

---------

Co-authored-by: Kyle Gerner <49618240+k-gerner@users.noreply.github.com>
Co-authored-by: mkouzel-yext <mkouzel@yext.com>
Co-authored-by: anguyen-yext2 <143001514+anguyen-yext2@users.noreply.github.com>

2030 of 3434 branches covered (59.11%)

Branch coverage included in aggregate %.

3484 of 5491 relevant lines covered (63.45%)

26.66 hits per line