<feed xmlns='http://www.w3.org/2005/Atom'>
<title>rt-thread.git/.github/workflows, branch copilot/fix-format-string-injection</title>
<subtitle>Unnamed repository; edit this file 'description' to name the repository.</subtitle>
<id>http://cgit.235523.xyz/rt-thread.git/atom/.github/workflows?h=copilot%2Ffix-format-string-injection</id>
<link rel='self' href='http://cgit.235523.xyz/rt-thread.git/atom/.github/workflows?h=copilot%2Ffix-format-string-injection'/>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/'/>
<updated>2026-03-20T09:57:25Z</updated>
<entry>
<title>[ci][format] fix the issue of CLA verification interception</title>
<updated>2026-03-20T09:57:25Z</updated>
<author>
<name>kurisaw</name>
<email>2053731441@qq.com</email>
</author>
<published>2026-03-20T07:24:43Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/commit/?id=4ca97e50ddf016efef1c45a8a870fbf5aa405fad'/>
<id>urn:sha1:4ca97e50ddf016efef1c45a8a870fbf5aa405fad</id>
<content type='text'>
</content>
</entry>
<entry>
<title>fix(ci): prevent expression injection in pr_format_bot.yml</title>
<updated>2026-03-20T09:55:47Z</updated>
<author>
<name>sourcecodereviewer</name>
<email>111017510+sourcecodereviewer@users.noreply.github.com</email>
</author>
<published>2026-03-20T09:40:17Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/commit/?id=f78bef1207125c3845765bdc46d5529e39f019ff'/>
<id>urn:sha1:f78bef1207125c3845765bdc46d5529e39f019ff</id>
<content type='text'>
Move user-controlled GitHub Actions context expressions
(github.event.pull_request.head.ref, head.repo.full_name,
pull_request.number, event.action) from direct interpolation
in run: blocks to env: variables.

Direct interpolation of these values in shell scripts allows
attackers to inject arbitrary commands via crafted branch names
under pull_request_target, which runs in the base repo context.

Using env: variables ensures values are treated as literal
strings by the shell, preventing command injection.

Ref: https://securitylab.github.com/research/github-actions-untrusted-input/

Reported-by: Wilson Cyber Research (@sourcecodereviewer)
Security: expression-injection</content>
</entry>
<entry>
<title>ci:arm_smart ci build erro (#11113)</title>
<updated>2026-01-03T07:22:29Z</updated>
<author>
<name>CYFS</name>
<email>2805686936@qq.com</email>
</author>
<published>2026-01-03T07:22:29Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/commit/?id=4463dbcf23dc800296fa72ba138e59a1a705c738'/>
<id>urn:sha1:4463dbcf23dc800296fa72ba138e59a1a705c738</id>
<content type='text'>
</content>
</entry>
<entry>
<title>[action]Add automatic testing for SMP.</title>
<updated>2025-12-04T07:53:07Z</updated>
<author>
<name>Rbb666</name>
<email>zhangbingru@rt-thread.com</email>
</author>
<published>2025-11-18T03:55:01Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/commit/?id=35816c14b748f7b86f7752e2f1d2f09fbf8d6920'/>
<id>urn:sha1:35816c14b748f7b86f7752e2f1d2f09fbf8d6920</id>
<content type='text'>
</content>
</entry>
<entry>
<title>[ci]: disable the post-ci-status enabling option for regarding the relevant CI</title>
<updated>2025-11-04T03:16:13Z</updated>
<author>
<name>kurisaw</name>
<email>2053731441@qq.com</email>
</author>
<published>2025-11-04T03:10:00Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/commit/?id=fa6f86eda3f9ca8794764853dbadef76ffb3e523'/>
<id>urn:sha1:fa6f86eda3f9ca8794764853dbadef76ffb3e523</id>
<content type='text'>
</content>
</entry>
<entry>
<title>[ci]: disable auto-run status ci</title>
<updated>2025-11-04T00:22:42Z</updated>
<author>
<name>Yuqiang Wang</name>
<email>yifang.wangyq@foxmail.com</email>
</author>
<published>2025-11-03T09:14:04Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/commit/?id=925eab78df9cc346a858827859111b54a020afa7'/>
<id>urn:sha1:925eab78df9cc346a858827859111b54a020afa7</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Add a token to fix the 403 error</title>
<updated>2025-11-02T08:31:46Z</updated>
<author>
<name>CYFS</name>
<email>2805686936@qq.com</email>
</author>
<published>2025-10-31T11:28:26Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/commit/?id=e458c0df7e86239a1a3e8542c69b82fa9f41c643'/>
<id>urn:sha1:e458c0df7e86239a1a3e8542c69b82fa9f41c643</id>
<content type='text'>
</content>
</entry>
<entry>
<title>[ci]: Introduce a regular inspection mechanism for abnormal CI reports (#10852)</title>
<updated>2025-10-30T01:19:36Z</updated>
<author>
<name>Yuqiang Wang</name>
<email>yifang.wangyq@foxmail.com</email>
</author>
<published>2025-10-30T01:19:36Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/commit/?id=ba509f92c2ab00cbf5a53ec89e1ad35e1eb70614'/>
<id>urn:sha1:ba509f92c2ab00cbf5a53ec89e1ad35e1eb70614</id>
<content type='text'>
</content>
</entry>
<entry>
<title>[Feature] Add automated CI results comment to pull requests (#10856)</title>
<updated>2025-10-29T22:18:47Z</updated>
<author>
<name>Copilot</name>
<email>198982749+Copilot@users.noreply.github.com</email>
</author>
<published>2025-10-29T22:18:47Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/commit/?id=a10922b01b6f87d018fd639fc71fd32995a38e4b'/>
<id>urn:sha1:a10922b01b6f87d018fd639fc71fd32995a38e4b</id>
<content type='text'>
* Initial plan

* Add CI results comment workflow

Co-authored-by: supperthomas &lt;60349489+supperthomas@users.noreply.github.com&gt;

* Improve CI results comment formatting and PR detection

Co-authored-by: supperthomas &lt;60349489+supperthomas@users.noreply.github.com&gt;

* Add documentation for CI results comment feature

Co-authored-by: supperthomas &lt;60349489+supperthomas@users.noreply.github.com&gt;

* Add ToolsCI and pkgs_test to monitored workflows

Co-authored-by: supperthomas &lt;60349489+supperthomas@users.noreply.github.com&gt;

* Add immediate CI status comment via direct workflow integration

Co-authored-by: supperthomas &lt;60349489+supperthomas@users.noreply.github.com&gt;

---------

Co-authored-by: copilot-swe-agent[bot] &lt;198982749+Copilot@users.noreply.github.com&gt;
Co-authored-by: supperthomas &lt;60349489+supperthomas@users.noreply.github.com&gt;</content>
</entry>
<entry>
<title>[bsp/xuantie] 添加E901BSP #10836</title>
<updated>2025-10-29T05:31:38Z</updated>
<author>
<name>WangShun</name>
<email>ws1516081466@gmail.com</email>
</author>
<published>2025-10-29T05:31:38Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/commit/?id=e4f014eb96ca35698f2c727cc4339599890f342d'/>
<id>urn:sha1:e4f014eb96ca35698f2c727cc4339599890f342d</id>
<content type='text'>
</content>
</entry>
</feed>
