Skip to content
Playwright Tests

fix(ci): move workflow expressions into env to prevent script injection in release.yml #1118

Sign in to view logs

fix(ci): move workflow expressions into env to prevent script injection in release.yml

fix(ci): move workflow expressions into env to prevent script injection in release.yml #1118

Triggered via pull request July 29, 2026 09:49
@nathanmelamed-cloudinarynathanmelamed-cloudinary
opened #1075
security/harden-release-workflow-script-injection
Status Success
Total duration 7m 24s
Artifacts 1

e2e_pr.yml

on: pull_request
install
7m 19s
install
Fit to window
Zoom out
Zoom in

Annotations

1 warning
install
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
playwright-report
33.9 MB
sha256:3ec1e4a5db537d3040f92bdd2609ba1ebc915cf15ca7e0cf5ff6b998026e4660