fix: prevent script injection in release workflow github-script steps#950

Merged

TomerFi merged 2 commits intodevfrom

fix/release-workflow-script-injection

Feb 16, 2026

Commits on Feb 16, 2026

fix: prevent script injection in release workflow github-script steps

TomerFi
and
cursoragent
committed
fix: use env vars for step outputs in run blocks (defense-in-depth)

TomerFi
and
cursoragent
committed