Files
Jérôme Prinet dcf6f72a92 Merge commit from fork
A dependency graph file downloaded from another workflow run may come from an
untrusted fork. Passing the parsed file whole to octokit.request() let keys such
as 'url' override the request destination and leak the token.
2026-10-28 13:28:01 +01:00
..
2026-10-28 13:28:01 +01:00
2026-10-28 13:28:01 +01:00
2025-04-09 16:55:48 -06:00