Package · GitHub Actions

canonical/get-workflow-version-action

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 8.2

CVE-2025-31479

canonical/get-workflow-version-action can leak a partial GITHUB_TOKEN in exception output

canonical/get-workflow-version-action is a GitHub composite action to get commit SHA that GitHub Actions reusable workflow was called with. Prior to 1.0.1, if the get-workflow-version-action step fails, the exception output may include the GITHUB_TOKEN. If th…

Canonical get-workflow-version-action canonical/get-workflow-version-action GitHub Actions

Apr 2, 2025