Dylan M. Taylor 80908a10c8 security(actions): harden apt package and resolve-version input handling (F-003, F-004) ...

- Disallow carriage returns and newlines upfront in resolve-version to prevent GitHub output-file protocol forgery
- Strictly validate generated build date against YYYY-MM-DD format
- Sanitize APP_TITLE against carriage returns and newlines in step summary
- Validate package tokens in install-apt-packages, rejecting options, path traversals, and injection payloads
- Terminate options with -- when invoking apt-get install
- Add unit tests for install-apt-packages validation and new test suite for resolve-version

2026-10-24 22:42:14 -04:00

..

action.yml

security(actions): harden apt package and resolve-version input handling (F-003, F-004)

2026-10-24 22:42:14 -04:00