spacehub

surshar / claude-code

Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.

Built by Anthropic · github.com/anthropics

fix: yaml.github-actions.security.run-shell-injection.run-shell-injection security vulnerability (#43824)Browse files
Automated security fix generated by Orbis Security AI

Co-authored-by: Ubuntu <ubuntu@ip-172-31-32-15.us-west-2.compute.internal>
orbisai0security authored on Apr 27, 2026 · GitHub committed on Apr 27, 2026 parent 7e93645 · commit c128568da0ec
1 changed file+7 -5compared with 7e93645
M.github/workflows/claude-dedupe-issues.yml
@@ -38,10 +38,11 @@
3838 if: always()
3939 env:
4040 STATSIG_API_KEY: ${{ secrets.STATSIG_API_KEY }}
41+ ISSUE_NUMBER: ${{ github.event.issue.number || inputs.issue_number }}
42+ REPO: ${{ github.repository }}
43+ TRIGGERED_BY: ${{ github.event_name }}
44+ WORKFLOW_RUN_ID: ${{ github.run_id }}
4145 run: |
42- ISSUE_NUMBER=${{ github.event.issue.number || inputs.issue_number }}
43- REPO=${{ github.repository }}
44-
4546 if [ -z "$STATSIG_API_KEY" ]; then
4647 echo "STATSIG_API_KEY not found, skipping Statsig logging"
4748 exit 0
@@ -51,7 +52,8 @@
5152 EVENT_PAYLOAD=$(jq -n \
5253 --arg issue_number "$ISSUE_NUMBER" \
5354 --arg repo "$REPO" \
54- --arg triggered_by "${{ github.event_name }}" \
55+ --arg triggered_by "$TRIGGERED_BY" \
56+ --arg workflow_run_id "$WORKFLOW_RUN_ID" \
5557 '{
5658 events: [{
5759 eventName: "github_duplicate_comment_added",
@@ -60,7 +62,7 @@
6062 repository: $repo,
6163 issue_number: ($issue_number | tonumber),
6264 triggered_by: $triggered_by,
63- workflow_run_id: "${{ github.run_id }}"
65+ workflow_run_id: $workflow_run_id
6466 },
6567 time: (now | floor | tostring)
6668 }]