4 Commits

Author SHA1 Message Date
Ousama Ben Younes fb8c9dbdbe fix: prevent shell injection in summary workflow (#1285)
The gh issue comment command was interpolating the LLM response via
${{ steps.inference.outputs.response }} directly in the shell, allowing
single-quote escaping if the response contained untrusted content.
RESPONSE was already declared as an env var but unused — now using it.

Closes #1285

Co-Authored-By: Claude <noreply@anthropic.com>
2026-04-01 05:13:53 +00:00
Salman Chishti 12a3330b78 Upgrade GitHub Actions for Node 24 compatibility (#876)
Signed-off-by: Salman Muin Kayser Chishti <13schishti@gmail.com>
2026-02-16 00:26:31 -05:00
Salman Chishti dbad24b81b Upgrade GitHub Actions to latest versions (#877)
Signed-off-by: Salman Muin Kayser Chishti <13schishti@gmail.com>
2026-02-16 00:26:24 -05:00
Alex Newman 0836a97845 Add GitHub Actions workflow to summarize new issues (#278) 2025-12-13 16:19:18 -05:00