FYI: Using the action like in the example would make you vulnerable to pwn requests

[ST-DDT]

The current run-nothing example is safe, but running anything in there that uses the source code is dangerous as it uses elevated permissions.
I'll recommend rewriting/removing the example or raising awareness by adding a comment.

SMdRQA/.github/workflows/label.yml

Lines 27 to 28 in 6ed1aa9

	echo "Running frontend tests..."
	# Put your commands for running frontend tests here

SMdRQA/.github/workflows/label.yml

Lines 33 to 34 in 6ed1aa9

	echo "Running backend tests..."
	# Put your commands for running backend tests here

• https://securitylab.github.com/research/github-actions-preventing-pwn-requests
• Description seems dangerous actions/labeler#755 (comment)

[welcome]

Thanks for opening your first issue here! Be sure to follow the issue template!

[SwaragThaikkandi]

@ST-DDT: This issue is currently awaiting triage.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Details

I am a bot created to help SwaragThaikkandi manage community feedback and contributions. You can check out my manifest file to understand my behavior and what I can do. If you want to use this for your project, you can check out the BirthdayResearch/oss-governance-bot repository.

[SwaragThaikkandi]

@ST-DDT: There are no 'kind' label on this PR. You need a 'kind' label to generate the release note automatically.

• /kind feature
• /kind bug
• /kind question

Details

I am a bot created to help SwaragThaikkandi manage community feedback and contributions. You can check out my manifest file to understand my behavior and what I can do. If you want to use this for your project, you can check out the BirthdayResearch/oss-governance-bot repository.

[SwaragThaikkandi]

@ST-DDT: There are no area labels on this issue. Adding an appropriate label will greatly expedite the process for us. You can add as many area as you see fit. If you are unsure what to do you can ignore this!

• /area ui-ux
• /area semantics
• /area translation
• /area security

Details

I am a bot created to help SwaragThaikkandi manage community feedback and contributions. You can check out my manifest file to understand my behavior and what I can do. If you want to use this for your project, you can check out the BirthdayResearch/oss-governance-bot repository.

[ST-DDT]

/kind bug
/area security

This isn't an actual security bug, but a potential for that.

[SwaragThaikkandi]

Hi,
Thanks for pointing out the problem. This particular workflow have been temporarily removed for further inspection.