guidewire-ci-cd-pipeline

The document is legitimate CI/CD reference material and contains no clear malware or intentional sabotage. The reusable workflow has security risks: unsafe `eval` of decrypted configuration, direct interpolation of workflow inputs into shell commands and paths, predictable temporary-secret handling, and hand-built JSON. These should be remediated with strict input validation, avoiding `eval`, secure temporary files and cleanup, environment-variable argument passing, and a JSON encoder. The destructive database task should remain blocked from CI through permissions and workflow safeguards.