github-starred/android
2
0
Fork 0
mirror of https://github.com/bitwarden/android.git synced 2026-05-06 15:58:22 -05:00
Code Issues 1.1k Packages Projects Releases 122 Wiki Activity

[PR #6784] [AppSec] AI Fix for Template Injection in GitHub Workflows Action #32873

New Issue
Open
opened 2026-04-18 16:13:26 -05:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-04-18 16:13:26 -05:00
Owner
Copy Link

📋 Pull Request Information

Original PR: https://github.com/bitwarden/android/pull/6784
Author: @aikido-autofix[bot]
Created: 4/11/2026
Status: 🔄 Open

Base: main ← Head: fix/security-sast-22741894-bvwj

📝 Commits (1)

  • 304006e fix(security): autofix Template Injection in GitHub Workflows Action

📊 Changes

1 file changed (+2 additions, -1 deletions)

View changed files

📝 .github/workflows/publish-store.yml (+2 -1)

📄 Description

This patch mitigates template injection vulnerabilities in GitHub Workflows by replacing direct references with an environment variable.

Aikido used AI to generate this PR.

High confidence: Aikido has a robust set of benchmarks for similar fixes, and they are proven to be effective.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/bitwarden/android/pull/6784 **Author:** [@aikido-autofix[bot]](https://github.com/apps/aikido-autofix) **Created:** 4/11/2026 **Status:** 🔄 Open **Base:** `main` ← **Head:** `fix/security-sast-22741894-bvwj` --- ### 📝 Commits (1) - [`304006e`](https://github.com/bitwarden/android/commit/304006ea1592ad4ec8dfcc63dfc857481930cb36) fix(security): autofix Template Injection in GitHub Workflows Action ### 📊 Changes **1 file changed** (+2 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/publish-store.yml` (+2 -1) </details> ### 📄 Description This patch mitigates template injection vulnerabilities in GitHub Workflows by replacing direct references with an environment variable. Aikido used AI to generate this PR. High confidence: Aikido has a robust set of benchmarks for similar fixes, and they are proven to be effective. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-18 16:13:26 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
app:authenticator
app:password-manager
bug
bug-passkey
customer-support
duplicate
enhancement
good first issue
help wanted
needs-reply
needs-response
pull-request
Mirrored from GitHub Pull Request
 question
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/android#32873
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?