Skip to main content

META_INTERPRETS_ARTIFACT

Constant META_INTERPRETS_ARTIFACT 

Source
pub const META_INTERPRETS_ARTIFACT: &str = "interprets_artifact";
Expand description

Marks a Step whose body interprets artifact (or other untrusted file) content into a privileged sink — unzip/tar -x, cat/jq piping into >> $GITHUB_ENV/>> $GITHUB_OUTPUT, eval, posting to a PR comment via actions/github-script body:/issue_body:, or evaluating extracted text. Combined with META_DOWNLOADS_ARTIFACT upstream in the same job and a workflow_run/pull_request_target trigger this is the classic mypy_primer / coverage-comment artifact-RCE pattern.