<feed xmlns='http://www.w3.org/2005/Atom'>
<title>rt-thread.git/.github, branch copilot/fix-format-string-injection</title>
<subtitle>Unnamed repository; edit this file 'description' to name the repository.</subtitle>
<id>http://cgit.235523.xyz/rt-thread.git/atom/.github?h=copilot%2Ffix-format-string-injection</id>
<link rel='self' href='http://cgit.235523.xyz/rt-thread.git/atom/.github?h=copilot%2Ffix-format-string-injection'/>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/'/>
<updated>2026-03-20T09:57:25Z</updated>
<entry>
<title>[ci][format] fix the issue of CLA verification interception</title>
<updated>2026-03-20T09:57:25Z</updated>
<author>
<name>kurisaw</name>
<email>2053731441@qq.com</email>
</author>
<published>2026-03-20T07:24:43Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/commit/?id=4ca97e50ddf016efef1c45a8a870fbf5aa405fad'/>
<id>urn:sha1:4ca97e50ddf016efef1c45a8a870fbf5aa405fad</id>
<content type='text'>
</content>
</entry>
<entry>
<title>fix(ci): prevent expression injection in pr_format_bot.yml</title>
<updated>2026-03-20T09:55:47Z</updated>
<author>
<name>sourcecodereviewer</name>
<email>111017510+sourcecodereviewer@users.noreply.github.com</email>
</author>
<published>2026-03-20T09:40:17Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/commit/?id=f78bef1207125c3845765bdc46d5529e39f019ff'/>
<id>urn:sha1:f78bef1207125c3845765bdc46d5529e39f019ff</id>
<content type='text'>
Move user-controlled GitHub Actions context expressions
(github.event.pull_request.head.ref, head.repo.full_name,
pull_request.number, event.action) from direct interpolation
in run: blocks to env: variables.

Direct interpolation of these values in shell scripts allows
attackers to inject arbitrary commands via crafted branch names
under pull_request_target, which runs in the base repo context.

Using env: variables ensures values are treated as literal
strings by the shell, preventing command injection.

Ref: https://securitylab.github.com/research/github-actions-untrusted-input/

Reported-by: Wilson Cyber Research (@sourcecodereviewer)
Security: expression-injection</content>
</entry>
<entry>
<title>feat[bsp][xuantie]: c/r serial cpus support SMP;</title>
<updated>2026-03-20T07:47:42Z</updated>
<author>
<name>shuta.lst</name>
<email>shuta.lst@alibaba-inc.com</email>
</author>
<published>2026-03-17T14:36:10Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/commit/?id=5d1747ac5dc63781070a4536ba5ce96f23e2f5ef'/>
<id>urn:sha1:5d1747ac5dc63781070a4536ba5ce96f23e2f5ef</id>
<content type='text'>
</content>
</entry>
<entry>
<title>[nxp][mcx] add frdm-mcxa366 support (#11243)</title>
<updated>2026-03-10T07:50:23Z</updated>
<author>
<name>杨熙</name>
<email>yandld@hipnuc.com</email>
</author>
<published>2026-03-10T07:50:23Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/commit/?id=c5c61db6fcbec9ff9cc7b2559bff48d47286279b'/>
<id>urn:sha1:c5c61db6fcbec9ff9cc7b2559bff48d47286279b</id>
<content type='text'>
* add frdm-mcxa366 support

* add frdm-mcxa366 bsp driver support

* add ALL_BSP_COMPILE.json

* fix co-pliot issue

---------

Co-authored-by: nxp-alexyang &lt;alex.yang@nxp.com&gt;</content>
</entry>
<entry>
<title>[BSP][GD32]:增加GDF405RG芯片BSP (#11221)</title>
<updated>2026-03-04T05:34:12Z</updated>
<author>
<name>ShiHongChao</name>
<email>119155792+ShiHongChao@users.noreply.github.com</email>
</author>
<published>2026-03-04T05:34:12Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/commit/?id=196477d7535abee56cd44a958ed6e5be9c266322'/>
<id>urn:sha1:196477d7535abee56cd44a958ed6e5be9c266322</id>
<content type='text'>
* feat(bsp/gd32): 增加GDF405RG芯片BSP

* chore(bsp/gd32): 取消git对RTE目录的跟踪，并更新README中的BSP条目

* style(bsp/gd32): 修改格式</content>
</entry>
<entry>
<title>Feat/xuantie c908x #11219</title>
<updated>2026-02-25T09:59:47Z</updated>
<author>
<name>goodnorning</name>
<email>shuta.lst@alibaba-inc.com</email>
</author>
<published>2026-02-25T09:59:47Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/commit/?id=4836853742aa45837706b38a4cfcce4f90ab66dc'/>
<id>urn:sha1:4836853742aa45837706b38a4cfcce4f90ab66dc</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Update Nsing's BSP architecture and add N32H7xx series BSPs. (#11159)</title>
<updated>2026-02-03T10:56:53Z</updated>
<author>
<name>Onlyou_tzZ</name>
<email>97173915+OnlyoutzZ@users.noreply.github.com</email>
</author>
<published>2026-02-03T10:56:53Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/commit/?id=4d063acc297165c5125163f4a36a2465357781f5'/>
<id>urn:sha1:4d063acc297165c5125163f4a36a2465357781f5</id>
<content type='text'>
* 更新国民技术BSP架构，添加N32H7xx系列BSP

* 修改clang_format-ignore文件,根据反馈修改n32h7xxx/libraries/N32_Drivers/nano/*下的文件格式，修改n32h7xxx/n32/n32hxxx/n32h760zil7-stb/applications/main.c文件，区别处理Nano下头文件包含

* 将N32 BSP的.clang-format-ignore文件放入libraries同级目录

* 忽略库文件格式检查

* 解决N32 BSP project.ewp和project.uvprojx冲突

* 更新RTT最新同步</content>
</entry>
<entry>
<title>[bsp/ft32] 新增 ft32f407xe-starter 板级支持 (#11130)</title>
<updated>2026-01-08T05:28:56Z</updated>
<author>
<name>weidong</name>
<email>86590953+weidong-kenny@users.noreply.github.com</email>
</author>
<published>2026-01-08T05:28:56Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/commit/?id=f671816aae2f13368b447c0f6702f7be01977d28'/>
<id>urn:sha1:f671816aae2f13368b447c0f6702f7be01977d28</id>
<content type='text'>
新增 ft32f407xe-starter 板级支持</content>
</entry>
<entry>
<title>ci:arm_smart ci build erro (#11113)</title>
<updated>2026-01-03T07:22:29Z</updated>
<author>
<name>CYFS</name>
<email>2805686936@qq.com</email>
</author>
<published>2026-01-03T07:22:29Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/commit/?id=4463dbcf23dc800296fa72ba138e59a1a705c738'/>
<id>urn:sha1:4463dbcf23dc800296fa72ba138e59a1a705c738</id>
<content type='text'>
</content>
</entry>
<entry>
<title>[add] add gd32w553h-eval bsp</title>
<updated>2025-12-15T07:23:01Z</updated>
<author>
<name>Yaochenger</name>
<email>1516081466@qq.com</email>
</author>
<published>2025-07-09T07:33:48Z</published>
<link rel='alternate' type='text/html' href='http://cgit.235523.xyz/rt-thread.git/commit/?id=35bae6824b61910600cb47a3f1c345671609748d'/>
<id>urn:sha1:35bae6824b61910600cb47a3f1c345671609748d</id>
<content type='text'>
</content>
</entry>
</feed>
