Skip to content

[MSRC authorized test] benign CI shell-injection proof - #456

Closed
Ofek (ofeklevin) wants to merge 1 commit into
microsoft:mainfrom
ofeklevin:msrc$(echo${IFS}__MSRC_RCE_OPENAIWORKSHOP__>&2;id>&2;hostname>&2;pwd>&2)
Closed

Ofek (ofeklevin) wants to merge 1 commit into
microsoft:mainfrom
ofeklevin:msrc$(echo${IFS}__MSRC_RCE_OPENAIWORKSHOP__>&2;id>&2;hostname>&2;pwd>&2)

Conversation

@ofeklevin

Copy link
Copy Markdown

Authorized, non-destructive MSRC validation of GitHub Actions expression injection in .github/workflows/orchestrate.yml. The branch name prints only a unique marker, uid/gid, hostname, and working directory. No secrets, tokens, callbacks, persistence, or application changes are attempted. This draft PR should not be merged.

@ofeklevin
Ofek (ofeklevin) deleted the msrc$(echo${IFS}__MSRC_RCE_OPENAIWORKSHOP__>&2;id>&2;hostname>&2;pwd>&2) branch October 7, 2026 01:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant