[all-commits] [llvm/llvm-project] 1d27e6: [Github] Fix security issues in libcxx-run-benchma...

Aiden Grossman via All-commits all-commits at lists.llvm.org
Mon Sep 15 05:41:53 PDT 2025


  Branch: refs/heads/main
  Home:   https://github.com/llvm/llvm-project
  Commit: 1d27e663691f0dc8b42acd09cab8c6eb15489950
      https://github.com/llvm/llvm-project/commit/1d27e663691f0dc8b42acd09cab8c6eb15489950
  Author: Aiden Grossman <aidengrossman at google.com>
  Date:   2025-09-15 (Mon, 15 Sep 2025)

  Changed paths:
    M .github/workflows/libcxx-run-benchmarks.yml

  Log Message:
  -----------
  [Github] Fix security issues in libcxx-run-benchmarks.yml workflow (#158467)

There was one action dependency that was not hash pinned and this
workflow also allowed code injection as the input might not be properly
escaped when dumped into the run script.



To unsubscribe from these emails, change your notification settings at https://github.com/llvm/llvm-project/settings/notifications


More information about the All-commits mailing list