fix: template-injection: ignore runner.temp (#277)

woodruffw · Dec 11, 2024 · 7c71e81 · 7c71e81
1 parent e3e73f4
commit 7c71e81
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/audit/template_injection.rs b/src/audit/template_injection.rs
@@ -68,6 +68,8 @@ const SAFE_CONTEXTS: &[&str] = &[
     "runner.debug",
     // GitHub Actions runner operating system.
     "runner.os",
+    // GitHub Actions temporary directory, value controlled by the runner itself.
+    "runner.temp",
 ];
 
 impl TemplateInjection {