fix(CI): use intermediate env variable to prevent TAG injection · chainloop-dev/chainloop@175f23f

Triggered via pull request December 5, 2025 10:48

jiparis

opened #2603

jiparis:ENG-311-gh

Status Success

Total duration 4m 40s

Artifacts –

codeql.yml

on: pull_request

Matrix: Analyze

9 errors

could not import github.com/chainloop-dev/chainloop/policies/go (invalid package name: "")

no required module provides package github.com/chainloop-dev/chainloop/policies/go; to add it:

could not import github.com/chainloop-dev/chainloop/policies/go (invalid package name: "")

no required module provides package github.com/chainloop-dev/chainloop/policies/go; to add it:

could not import github.com/chainloop-dev/chainloop/policies/go (invalid package name: "")

no required module provides package github.com/chainloop-dev/chainloop/policies/go; to add it:

undefined: dag

could not import main/internal/dagger (invalid package name: "")

package main/internal/dagger is not in std (/opt/hostedtoolcache/go/1.25.5/x64/src/main/internal/dagger)