[code-scanning-fix] Fix REST API path injection in ghAPIGet/ghAPIGetArray (alerts #641, #642) - #45400

Merged

pelikhan merged 3 commits into

mainfrom

fix/code-scanning-641-642-rest-path-injection-403304c678a7b29a

Jul 14, 2026

Commits on Jul 14, 2026

fix: URL-path-encode owner/repo in REST API calls to prevent path injection

github-actions[bot]
and
Copilot
authored
3f753a9
Harden outcome_eval endpoint path handling

Copilot
and
pelikhan
authored
60188f8
chore: start PR finisher triage

Copilot
and
gh-aw-bot
authored
7ea16ea