Create vulnerable.yml #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Closed

schcamille wants to merge 1 commit into main from schcamille-patch-1

Owner

schcamille commented Jul 15, 2025

No description provided.


          Create vulnerable.yml

d7b6e1a

github-advanced-security bot found potential problems

View reviewed changes

.github/workflows/vulnerable.yml

Comment on lines +13 to +16

+                    - run: |
+                        npm install
+                        npm build
+                    - uses: completely/fakeaction@v2

Check failure

Code scanning / CodeQL

Checkout of untrusted code in a privileged context Critical

Potential execution of untrusted code on a privileged workflow (

)

schcamille closed this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet