aikido-autofix[bot] 4714598155 ci: mitigate template injection attack in build_linux_wheel (#3195) ...

This patch mitigates template injection vulnerabilities in GitHub
Workflows by replacing direct references with an environment variable.

Aikido used AI to generate this PR.

High confidence: Aikido has a robust set of benchmarks for similar
fixes, and they are proven to be effective.

Co-authored-by: aikido-autofix[bot] <119856028+aikido-autofix[bot]@users.noreply.github.com>

2026-03-30 09:29:24 -07:00

..

build_linux_wheel

ci: mitigate template injection attack in build_linux_wheel (#3195)

2026-03-30 09:29:24 -07:00

build_mac_wheel

ci(python): pin maturin to work around bug (#3088)

2026-03-02 09:38:54 -08:00

build_windows_wheel

ci(python): pin maturin to work around bug (#3088)

2026-03-02 09:38:54 -08:00

run_tests

ci: add support for lance-format fury index for downloading pylance (#2804)

2025-11-20 23:29:36 -08:00

upload_wheel

ci: fix python beta release to publish to fury (#1937)

2024-12-13 14:19:14 -08:00

cargo-publish.yml

ci: fix publish failure notifications being skipped (#2976)

2026-02-04 11:22:27 -08:00

codex-fix-ci.yml

ci: add codex fix ci workflow (#3022)

2026-02-13 14:20:02 -08:00

codex-update-lance-dependency.yml

fix: avoid force push in codex workflows to work with v0.95.0 git safety (#2981)

2026-02-05 15:57:45 -08:00

dev.yml

chore: dependency updates and security fixes (#3116)

2026-03-09 20:04:27 -07:00

docs.yml

chore: dependency updates and security fixes (#3116)

2026-03-09 20:04:27 -07:00

java-publish.yml

feat: use rest namespace for lancedb java sdk (#2845)

2025-12-04 13:53:47 -08:00

java.yml

feat: use rest namespace for lancedb java sdk (#2845)

2025-12-04 13:53:47 -08:00

lance-release-timer.yml

feat: update codex url key (#2812)

2025-11-24 13:13:18 -08:00

license-header-check.yml

ci: check license headers (#2076)

2025-01-29 08:27:07 -08:00

make-release-commit.yml

feat: upgrade lance to stable version (#2420)

2025-06-04 13:34:30 -07:00

nodejs.yml

chore: fix ci (#3139)

2026-03-16 06:25:40 -07:00

npm-publish.yml

chore: fix ci (#3139)

2026-03-16 06:25:40 -07:00

pypi-publish.yml

chore: fix ci (#3139)

2026-03-16 06:25:40 -07:00

python.yml

chore: fix ci (#3139)

2026-03-16 06:25:40 -07:00

rust.yml

fix(ci): bump AWS SDK MSRV pins to March 2025 release (#3179)

2026-03-23 15:30:33 -05:00

update_package_lock_run_nodejs.yml

feat: add publish step for nodejs (#1155)

2024-04-05 16:33:37 -07:00

update_package_lock_run.yml

chore: bump github actions to v4 due to GHA warnings of node version deprecation (#874)

2024-04-05 16:28:56 -07:00