| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2026-08-12 | ci: improve PR format workflow | CYFS | |
| 2026-03-20 | fix(ci): prevent expression injection in pr_format_bot.yml | sourcecodereviewer | |
| Move user-controlled GitHub Actions context expressions (github.event.pull_request.head.ref, head.repo.full_name, pull_request.number, event.action) from direct interpolation in run: blocks to env: variables. Direct interpolation of these values in shell scripts allows attackers to inject arbitrary commands via crafted branch names under pull_request_target, which runs in the base repo context. Using env: variables ensures values are treated as literal strings by the shell, preventing command injection. Ref: https://securitylab.github.com/research/github-actions-untrusted-input/ Reported-by: Wilson Cyber Research (@sourcecodereviewer) Security: expression-injection | |||
| 2025-10-01 | [github][ci]: add concurrency control to GitHub Actions (#10761) | CYFS | |
| ci: add concurrency control to GitHub Actions | |||
| 2025-09-26 | improve[ci]: Improve the comment instructions for the PR format bot (#10747) | Yuqiang Wang | |
| 2025-09-23 | improve[ci]: each comment is assigned a unique ID. | kurisaw | |
| 2025-09-23 | tools: add clang-format formatting script for CI (#10684) | Yuqiang Wang | |
| * tools: add clang-format formatting script for CI * improve[ci]: standardize the naming of CI files related to clang-format | |||
 |
index : rt-thread.git | |
| Unnamed repository; edit this file 'description' to name the repository. |
| summaryrefslogtreecommitdiff |