Potential security issues in GitHub Actions workflows

[jiangnanpro]

Potential security issues in GitHub Actions workflows

Hi! We are a research team from Radboud University in the Netherlands, currently working on security vulnerability analysis on GitHub Actions workflows. During our study, we found some potential issues in the workflow files of your repository and would like to bring them to your attention to help enhance security.

If you are interested, how would you like us to report it？

If you have any questions, please feel free to reach out!
Thank you!

[github-actions]

Hi! Thank you for filing an issue. Please be patient before anyone responds.
Make sure your issue is filled in with as many details as possible.
Its also recommended to check out previously resolved or closed issues so no duplicates are created.
There's also the chance the anwser for your issue can be found on one of the XVG wiki/FAQ's.