Visitar URL original
Fix zizmor "code injection via template expansion" by joerick · Pull Request #2784 · pypa/cibuildwheel · GitHub
Skip to content

Fix zizmor "code injection via template expansion" - #2784

Merged
henryiii merged 4 commits into
mainfrom
inline-parameter
Mar 27, 2026
Merged

henryiii merged 4 commits into
mainfrom
inline-parameter

Conversation

@joerick

@joerick joerick commented Mar 16, 2026

Copy link
Copy Markdown
Contributor
  • Refactor action.yml to avoid template expansion, composing command line in Python
  • Remove more template expansion
  • Make a string quoting that's compatible with pwsh

@joerick
joerick marked this pull request as ready for review March 16, 2026 23:10
Comment thread .github/workflows/test.yml Outdated
Comment thread action.yml Outdated
Comment thread action.yml Outdated
@henryiii
henryiii merged commit 6111948 into main Mar 27, 2026
45 checks passed
@henryiii
henryiii deleted the inline-parameter branch March 27, 2026 15:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants