gha-expression-proof 1.0.0

GitHub Actions expression evaluator and receipt generator for offline CI compatibility testing
Documentation 
1
2
3
4
5
6
7

# Security Policy

Report security issues privately to the Wildmason maintainers.

Do not open a public issue for vulnerabilities involving unsafe path handling, unexpected file hashing, receipt leakage, or expression evaluation bypasses.

`gha-expression-proof` treats expressions and context JSON as untrusted input. It does not execute shell commands, call GitHub APIs, or read files except through explicit `hashFiles()` workspace patterns.