Claude 028c8a2276 fix: use env vars instead of template expansion in visual-review workflow ...

Moves all ${{ }} expressions out of `run:` blocks and into `env:` to
prevent potential code injection via template expansion (zizmor finding).
Also switches the initial PR comment to use github-script with env vars
instead of add-pr-comment with inline template interpolation.

https://claude.ai/code/session_01XSTqDJXuR4jaLN7SGm3uES

2026-03-01 19:52:59 +00:00

..

DISCUSSION_TEMPLATE

chore: remove checkbox requirement from dupe search question (#18647)

2025-05-26 10:47:58 -05:00

ISSUE_TEMPLATE

chore: device input field for issue template (#21066)

2025-08-19 17:13:52 +00:00

PULL_REQUEST_TEMPLATE

fix: pr template not being used and make some changes (#15893)

2025-02-04 09:06:54 -06:00

workflows

fix: use env vars instead of template expansion in visual-review workflow

2026-03-01 19:52:59 +00:00

.nvmrc

chore(deps): update node.js to v24.13.1 (#26275)

2026-02-17 11:45:57 +01:00

.prettierignore

chore: dev environment improvements and dependency updates (#19676)

2025-07-01 22:47:59 -04:00

FUNDING.yml

chore: modify .github/FUNDING.yml

2025-02-27 14:28:08 +00:00

labeler.yml

feat: ocr (#18836)

2025-10-27 14:09:55 +00:00

mise.toml

feat: mise monorepo tasks (#23691)

2025-11-10 15:55:15 +01:00

package.json

fix: prettier (#24386)

2025-12-04 16:10:42 +00:00

pull_request_template.md

chore: discourage LLM-generated PRs (#26211)

2026-02-14 10:40:27 -06:00

release.yml

feat: lint workflow files and others files in .github (#16914)

2025-03-24 10:49:18 -05:00