fireddd 23f4bd6bfe fix(ci): prevent Node.js code injection in plugin directory name ... Replace `node -e` with `jq` for reading plugin package names in the coverage workflow. The previous approach interpolated $plugin_dir directly into a JavaScript expression, which could allow code injection via crafted directory names. Closes #913 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>		2026-04-10 02:08:01 +05:30
..
scripts	fix: remove dead has_coverage output variable (#913)	2026-04-05 17:37:29 +05:30
workflows	fix(ci): prevent Node.js code injection in plugin directory name	2026-04-10 02:08:01 +05:30