[anupamme]

The artifact-path input is retrieved via core.getInput() and passed directly to fs.readFile() without path validation or sanitization. An attacker controlling workflow inputs can supply path traversal sequences (../../../etc/passwd) to read arbitrary files on the GitHub Actions runner filesystem. The affected code is src/main.ts:34. This change is the fix I would apply.

Reference: CWE-22

What changed

• src/main.ts

Verification

No automated check could be run against this repository, so this change is unverified beyond review. Please treat it as a suggestion.

---

Automated security fix by OrbisAI Security

[43081j]

oh? and how can an attack control inputs?

if a person has control of your workflow file's contents, us relying on a GitHub supplied input is the least of your worries. Send your bot elsewhere.