fix-unnatural-line-breaks
Warn
Audited by Socket on Sep 27, 2026
1 alert found:
SecuritySecurity.github/workflows/release.yml
MEDIUMSecurityMEDIUM
.github/workflows/release.yml
The workflow has a command-injection risk because the manually supplied version is interpolated directly into shell scripts. Exploitation requires a user able to dispatch the workflow, but injected commands could run in a job with contents write permission. No evidence of embedded malware is present.
Confidence: 98%Severity: 72%
Audit Metadata