Andrew Morgan cd9e54cc89 Replace steps.bake.outputs.metadata with an env var ...

So the bake job's output can't be used to run arbitrary shell commands. See https://docs.zizmor.sh/audits/#template-injection

2026-05-05 12:36:20 +01:00

..

build.yaml

Replace steps.bake.outputs.metadata with an env var

2026-05-05 12:36:20 +01:00

ci.yaml

Tell actions/checkout not to persist credentials

2026-05-05 12:34:58 +01:00

coverage.yaml

Tell actions/checkout not to persist credentials

2026-05-05 12:34:58 +01:00

docs.yaml

Tell actions/checkout not to persist credentials

2026-05-05 12:34:58 +01:00

merge-back.yaml

Tell actions/checkout not to persist credentials

2026-05-05 12:34:58 +01:00

release-branch.yaml

Tell actions/checkout not to persist credentials

2026-05-05 12:34:58 +01:00

release-bump.yaml

Tell actions/checkout not to persist credentials

2026-05-05 12:34:58 +01:00

tag.yaml

Tell actions/checkout not to persist credentials

2026-05-05 12:34:58 +01:00

translations-download.yaml

Tell actions/checkout not to persist credentials

2026-05-05 12:34:58 +01:00

translations-upload.yaml

Tell actions/checkout not to persist credentials

2026-05-05 12:34:58 +01:00