toolkit
toolkit copied to clipboard
Update semver to mitigate CVE-2022-25883
We were seeing other Github Actions well downstream from here being reported by Dependabot with this vulnerability:
https://nvd.nist.gov/vuln/detail/CVE-2022-25883
I did mention that this could possibly be included in https://github.com/actions/toolkit/pull/1526 instead of here.
I did mention that this could possibly be included in #1526 instead of here.
I included your change in my PR
كنا نرى إجراءات Github أخرى في اتجاه مجرى النهر يتم الإبلاغ عنها بواسطة Dependabot بهذه الثغرة الأمنية:
https://nvd.nist.gov/vuln/detail/CVE-2022-25883
لقد ذكرت أنه من الممكن إدراج هذا في رقم 1526 بدلاً من هنا.