From 0ada1d0d6cb11fcf309d3d3b392998b6f54c08be Mon Sep 17 00:00:00 2001 From: Rakshil Modi Date: Fri, 26 Jun 2026 09:50:27 -0700 Subject: [PATCH 1/3] Prevent script injection in GHA workflows --- .github/workflows/release.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 71ae1d14e..0f845ed9c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -34,13 +34,14 @@ jobs: - name: Make new release env: Title: ${{ github.event.inputs.release_title }} + ReleaseType: ${{ github.event.inputs.release_type }} run: | # Escape special characters Title=$(echo ${Title//[\"]\\\"}) Title=$(echo ${Title//[\']\\\'}) Title=$(echo ${Title//[\$]}) - ./utils/publish-release.sh "${{ github.event.inputs.release_type }}" "$Title" + ./utils/publish-release.sh "$ReleaseType" "$Title" - name: Generate documentation run: | From 8948be5be6c7208b07e2aa13751a2872c278c5d4 Mon Sep 17 00:00:00 2001 From: Rakshil Modi Date: Mon, 29 Jun 2026 10:41:25 -0700 Subject: [PATCH 2/3] Changing env to caps --- .github/workflows/release.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 0f845ed9c..703c4d97a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -33,15 +33,15 @@ jobs: - name: Make new release env: - Title: ${{ github.event.inputs.release_title }} - ReleaseType: ${{ github.event.inputs.release_type }} + TITLE: ${{ github.event.inputs.release_title }} + RELEASE_TYPE: ${{ github.event.inputs.release_type }} run: | # Escape special characters - Title=$(echo ${Title//[\"]\\\"}) - Title=$(echo ${Title//[\']\\\'}) - Title=$(echo ${Title//[\$]}) + TITLE=$(echo ${TITLE//[\"]\\\"}) + TITLE=$(echo ${TITLE//[\']\\\'}) + TITLE=$(echo ${TITLE//[\$]}) - ./utils/publish-release.sh "$ReleaseType" "$Title" + ./utils/publish-release.sh "$RELEASE_TYPE" "$TITLE" - name: Generate documentation run: | From 07e0b5fa5d02c23afa0d346b8c193740ffcd26d9 Mon Sep 17 00:00:00 2001 From: Rakshil Modi Date: Mon, 29 Jun 2026 16:19:55 -0700 Subject: [PATCH 3/3] updating builder --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 3b0368619..1d2fa6fbd 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -7,7 +7,7 @@ on: - 'docs' env: - BUILDER_VERSION: v0.9.84 + BUILDER_VERSION: v0.9.95 BUILDER_SOURCE: releases BUILDER_HOST: https://d19elf31gohf1l.cloudfront.net PACKAGE_NAME: aws-iot-device-sdk-cpp-v2