mirror of
https://github.com/SonarSource/sonarqube-scan-action.git
synced 2026-01-27 15:13:16 +03:00
It is unlikely to be a real concern, since an attacker having the possibility to edit a pipeline can easily execute any command, but at least our step won't be involved