Repository navigation

fix(ci): stop handing the checkout token to untrusted workflow code - #2420

Merged

chaliy merged 2 commits into

mainfrom

eve/wonderful-hamilton-b52tk3

Sep 18, 2026

Merged

fix(ci): stop handing the checkout token to untrusted workflow code#2420
chaliy merged 2 commits into
mainfrom
eve/wonderful-hamilton-b52tk3

Commits on Sep 18, 2026
- fix(ci): stop handing the checkout token to untrusted workflow code
  chaliy
  committed
  4e87d98
- docs(security): add TM-INF-034 to the public threat model
  chaliy
  committed
  3ad0eda