Fix GitHub workflow security vulnerabilities - comprehensive defense eliminating all command injection vectors#118

Draft

litlfred with Copilot wants to merge 7 commits into

mainfrom

copilot/fix-117

Commits on Sep 16, 2025

Initial plan
Copilot
committed
Fix GitHub workflow security vulnerabilities - sanitize variables

Copilot
and
litlfred
committed
Fix curl injection vulnerability by using file-based data transfer

Copilot
and
litlfred
committed
Implement JavaScript actions for ultimate security - eliminate all shell processing of context values

Copilot
and
litlfred
committed
Use intermediate environment variables for remaining inline scripts per GitHub security recommendations

Copilot
and
litlfred
committed
Fix qa.json processing security vulnerability - eliminate command substitution risks

Copilot
and
litlfred
committed
Complete qa.json security fix - eliminate all remaining command substitution vulnerabilities

Copilot
and
litlfred
committed