Potential security issues in GitHub Actions workflows

[jiangnanpro]

Potential security issues in GitHub Actions workflows

Hi! We are a research team from Radboud University in the Netherlands, currently working on security vulnerability analysis on GitHub Actions workflows. During our study, we found some potential issues in the workflow files of your repository and would like to bring them to your attention to help enhance security.

If you are interested, how would you like us to report it？

If you have any questions, please feel free to reach out!
Thank you!

[carltongibson]

As far as I can see this isn't relevant. The action only installs the dependencies and runs the tests. Nothing sensitive.

[jiangnanpro]

Hi! Thank you for your feedback.