angular/.github/workflows
Herdiyan IT Dev 316d49a8ae refactor(dev-infra): use shell: false and quote args in benchmark-compare workflow
Currently, the exec() utility uses childProcess.spawn() with shell: true. This commit changes the spawn option to shell: false to prevent OS command injection vulnerabilities and quotes the benchmark target in the github action.

(cherry picked from commit f219e65841)
2026-04-28 17:29:28 +00:00
..
adev-preview-build.yml build: update cross-repo angular dependencies 2026-04-08 10:06:53 -07:00
adev-preview-deploy.yml build: pin firebase-tools version and disable credential persistence in preview deploy workflow 2026-04-22 14:38:27 -07:00
assistant-to-the-branch-manager.yml build: update cross-repo angular dependencies 2026-04-08 10:06:53 -07:00
benchmark-compare.yml refactor(dev-infra): use shell: false and quote args in benchmark-compare workflow 2026-04-28 17:29:28 +00:00
ci.yml build: update cross-repo angular dependencies 2026-04-08 10:06:53 -07:00
cross-repo-adev-docs.yml build: update all github actions 2026-04-17 10:53:19 -07:00
dev-infra.yml build: update cross-repo angular dependencies 2026-04-08 10:06:53 -07:00
google-internal-tests.yml build: update cross-repo angular dependencies 2026-04-08 10:06:53 -07:00
manual.yml build: update cross-repo angular dependencies 2026-04-08 10:06:53 -07:00
merge-ready-status.yml build: update cross-repo angular dependencies 2026-04-08 10:06:53 -07:00
perf.yml build: update cross-repo angular dependencies 2026-04-08 10:06:53 -07:00
pr.yml build: update cross-repo angular dependencies 2026-04-08 10:06:53 -07:00
scorecard.yml build: update all github actions 2026-04-17 10:53:19 -07:00