The CamelHive Standard · v3.33.0

CH-SEC-062v3.33.0

CI workflows don't interpolate variable data into action inputs that run as code

Pinned as it read in catalog v3.33.0 — the current version of this rule may read differently, see CH-SEC-062.

Area
SEC
Severity
high
Detection
static
Corpus coverage
not measured by the corpus