Skip to content

Avoid script injection when setting Percy branch from refs#729

Open
arpitjain099 wants to merge 1 commit into
coinbase:masterfrom
arpitjain099:chore/harden-expression-injection
Open

Avoid script injection when setting Percy branch from refs#729
arpitjain099 wants to merge 1 commit into
coinbase:masterfrom
arpitjain099:chore/harden-expression-injection

ci: read branch refs from env in visreg Percy-branch steps

090cc76
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Required Checks succeeded May 28, 2026 in 0s

StepSecurity Required Checks

Finished StepSecurity Required Checks

  • NPM Compromised Packages Check - Checks for compromised npm package versions in the PR
  • NPM Package Cooldown Check - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases

Details

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.