The CamelHive Standard

CH-SEC-062

CI workflows don't interpolate variable data into action inputs that run as code

Currently v3.33.0. To cite a stable, pinned form of this page, use /standard/versions/3.33.0/CH-SEC-062.

Area
SEC
Severity
high
Detection
static
Corpus coverage
not measured by the corpus

Corpus coverage measured as of 9/2/2026 (commit 2c57d95600).