Skip to content

chore: harden Github Actions workflows - #3559

Draft
Florence-Njeri wants to merge 8 commits into
asyncapi:masterfrom
Florence-Njeri:hardening-GA
Draft

chore: harden Github Actions workflows#3559
Florence-Njeri wants to merge 8 commits into
asyncapi:masterfrom
Florence-Njeri:hardening-GA

fix code execution vulns in the workflows by isolating all template e…

7f3151f
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis failed May 27, 2026 in 19s

Quality Gate failed

Failed conditions
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Annotations

Check failure on line 21 in .github/workflows/ambassador_management.yml

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Make sure that no untrusted code is executed from a fork.

See more on https://sonarcloud.io/project/issues?id=asyncapi_community&issues=AZ5p154J4bIZzb5OGaGr&open=AZ5p154J4bIZzb5OGaGr&pullRequest=3559

Check failure on line 28 in .github/workflows/ambassador_management.yml

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Make sure that no untrusted code is executed from a fork.

See more on https://sonarcloud.io/project/issues?id=asyncapi_community&issues=AZ5p154J4bIZzb5OGaGs&open=AZ5p154J4bIZzb5OGaGs&pullRequest=3559