[SEC:HIGH][FP=a02ad8d5] Potentially untrusted input - environment variable

[github-actions]

General Information

• Severity: high
• Title: Potentially untrusted input - environment variable
• Category: pipelineMisconfigurations
• Rule: AVD-PIPELINE-0006
• Alert hash: a02ad8d5a9e91343a2659da6c396b616
• First seen: 2026-05-22

Description

Consider using an intermediate environment variable instead of defining it in the 'Checkout code' step shell

Location

• Repository: AbsaOSS/atum-service
• File: format_check.yml
• Start Line: 29
• End Line: 29

Dependency Details

• Reachable: False