Skip to content

TEST ONLY: CodeQL PR-scan validation (do not merge) - #82

Closed
napetrov wants to merge 1 commit into
cq-test-basefrom
cq-test-pr
Closed

TEST ONLY: CodeQL PR-scan validation (do not merge)#82
napetrov wants to merge 1 commit into
cq-test-basefrom
cq-test-pr

TEST ONLY: planted untrusted checkout

14aeec8
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Oct 4, 2026 in 4s

1 new alert including 1 critical severity security vulnerability

New alerts in code changed by this pull request

Security Alerts:

  • 1 critical

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 14 in .github/workflows/zz-planted-test.yml

See this annotation in the file changed.

Code scanning / CodeQL

Checkout of untrusted code in a privileged context Critical

Checkout of untrusted code from
github.event.pull_request.head.sha
Loading
in a privileged workflow with later potential execution (event trigger:
pull_request_target
Loading
).