From a4914957f01c103dbe8c167c756d4e3310aa9e87 Mon Sep 17 00:00:00 2001 From: Averi Kitsch Date: Thu, 30 Oct 2025 13:58:42 -0700 Subject: [PATCH] ci: prevent injection in presubmit --- .github/workflows/presubmit-tests.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/presubmit-tests.yml b/.github/workflows/presubmit-tests.yml index 17a2118..5562901 100644 --- a/.github/workflows/presubmit-tests.yml +++ b/.github/workflows/presubmit-tests.yml @@ -30,7 +30,7 @@ jobs: - name: Install toolbox binary run: | VERSION=$(cat toolbox_version.txt) - curl -L -o toolbox https://storage.googleapis.com/genai-toolbox/v$VERSION/linux/amd64/toolbox + curl -L -o toolbox "https://storage.googleapis.com/genai-toolbox/v$%7BVERSION%7D/linux/amd64/toolbox" chmod +x toolbox - name: Install Extension