VYPR

GitHub Actions package

canonical/get-workflow-version-action

pkg:github/canonical/get-workflow-version-action

Vulnerabilities (1)

  • CVE-2025-31479HigApr 2, 2025
    affected < 1.0.1fixed 1.0.1

    canonical/get-workflow-version-action is a GitHub composite action to get commit SHA that GitHub Actions reusable workflow was called with. Prior to 1.0.1, if the get-workflow-version-action step fails, the exception output may include the GITHUB_TOKEN. If the full token is inclu