[madrob]

• Replace direct input expansion with env usage to prevent template injection.
• Add lock file to pin actions and ensure local actions are always read from same repository

[zcbenz]

Thanks for adding the lock file.

• Replace direct input expansion with env usage to prevent template injection.

Can you elaborate on this? The inputs are either hard-coded in files, or have to be manually entered by maintainers when manually invoke a workflow, there is no place for injection from untrusted parties.