Skip to content

fix(security): prevent prompt injection via issue/PR content in Gemini agent workflows #38

fix(security): prevent prompt injection via issue/PR content in Gemini agent workflows

fix(security): prevent prompt injection via issue/PR content in Gemini agent workflows #38

Triggered via pull request June 28, 2026 02:16
@XananasX7XananasX7
opened #164
Status Success
Total duration 41s
Artifacts 2

github_actions_scan.yml Required

on: pull_request_target
check-changes
4s
check-changes
zizmor-config
10s
zizmor-config
zizmor-scan
9s
zizmor-scan
zizmor-output
0s
zizmor-output
zizmor-upload
8s
zizmor-upload
Fit to window
Zoom out
Zoom in

Annotations

2 warnings
zizmor-config
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
zizmor-upload
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
zizmor Expired
4.43 KB
sha256:a2bf902b5f19ce96aca28a9bdad549dd83a3172020b607ed7adbe01e830e9145
zizmor-config Expired
295 Bytes
sha256:e1b088b8027f0db08e422baf6222722160776f39652853a10343768234378aab