Potential security issues in GitHub Actions workflows

[jiangnanpro]

Potential security issues in GitHub Actions workflows

Hi! We are a research team from Radboud University in the Netherlands, currently working on security vulnerability analysis on GitHub Actions workflows. During our study, we found some potential issues in the workflow files of your repository and would like to bring them to your attention to help enhance security.

If you are interested, how would you like us to report it？

If you have any questions, please feel free to reach out!
Thank you!

[github-actions]

👋 This issue has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the keep label to hold stale off permanently, or do nothing. If you do nothing this issue will be closed eventually by the stale bot.

[kaylareopelle]

Hi @jiangnanpro, my apologies, we missed this earlier! Thank you for studying our repo. If you have changes to suggest, please open PRs with improvements or create new issues in the repository.