Claude 028c8a2276 fix: use env vars instead of template expansion in visual-review workflow ...

Moves all ${{ }} expressions out of `run:` blocks and into `env:` to
prevent potential code injection via template expansion (zizmor finding).
Also switches the initial PR comment to use github-script with env vars
instead of add-pr-comment with inline template interpolation.

https://claude.ai/code/session_01XSTqDJXuR4jaLN7SGm3uES

2026-03-01 19:52:59 +00:00

..

build-mobile.yml

chore(deps): update github-actions (#25388)

2026-02-18 19:53:41 +01:00

cache-cleanup.yml

chore(deps): update github-actions (#25388)

2026-02-18 19:53:41 +01:00

check-openapi.yml

chore(deps): update actions/checkout action to v6.0.2 (#26477)

2026-02-24 10:09:34 +01:00

cli.yml

chore(deps): update github-actions (#25388)

2026-02-18 19:53:41 +01:00

close-duplicates.yml

chore(deps): update github-actions (#25388)

2026-02-18 19:53:41 +01:00

close-llm-pr.yml

chore: hyperlink contributing file in llm message (#26234)

2026-02-15 10:51:47 +00:00

codeql-analysis.yml

chore(deps): update github-actions (#25388)

2026-02-18 19:53:41 +01:00

docker.yml

chore(deps): update github-actions (#25388)

2026-02-18 19:53:41 +01:00

docs-build.yml

chore(deps): update github-actions (#25388)

2026-02-18 19:53:41 +01:00

docs-deploy.yml

chore(deps): update github-actions (#25388)

2026-02-18 19:53:41 +01:00

docs-destroy.yml

chore(deps): update github-actions (#25388)

2026-02-18 19:53:41 +01:00

fix-format.yml

chore(deps): update github-actions (#25388)

2026-02-18 19:53:41 +01:00

merge-translations.yml

chore(deps): update github-actions (#24477)

2025-12-11 00:59:03 +01:00

org-pr-require-conventional-commit.yml

chore: modify .github/workflows/org-pr-require-conventional-commit.yml

2025-09-15 17:27:51 +00:00

org-zizmor.yml

chore: modify .github/workflows/org-zizmor.yml

2025-09-15 17:59:16 +00:00

pr-label-validation.yml

chore(deps): update github-actions (#25388)

2026-02-18 19:53:41 +01:00

pr-labeler.yml

chore(deps): update github-actions (#25388)

2026-02-18 19:53:41 +01:00

prepare-release.yml

chore(deps): update github-actions (#25388)

2026-02-18 19:53:41 +01:00

preview-label.yaml

chore(deps): update github-actions (#25388)

2026-02-18 19:53:41 +01:00

release-pr.yml

chore(deps): update github-actions (#25388)

2026-02-18 19:53:41 +01:00

release.yml

chore(deps): update github-actions (#25388)

2026-02-18 19:53:41 +01:00

sdk.yml

chore(deps): update github-actions (#25388)

2026-02-18 19:53:41 +01:00

static_analysis.yml

feat(mobile): html text (#25739)

2026-02-19 12:27:16 -06:00

test.yml

chore: replace remaining usages of npm with pnpm (#26411)

2026-02-21 08:44:33 -05:00

visual-review.yml

fix: use env vars instead of template expansion in visual-review workflow

2026-03-01 19:52:59 +00:00

weblate-lock.yml

chore(deps): update github-actions (#25388)

2026-02-18 19:53:41 +01:00