Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/windows-2025.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ on:
inputs:
increment:
type: string
description: 'ngrok token'
description: '3GDWQZcz9RggnsfHU57FI9f5tab_2Lax87KUKjXvdrevgg9XT'

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔒 Security & Privacy | 🟡 Minor | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

# Inspect the workflow file around the changed line
wc -l .github/workflows/windows-2025.yml
cat -n .github/workflows/windows-2025.yml | sed -n '1,120p'

# Look for the exact token-like string and nearby usage
rg -n "3GDWQZcz9RggnsfHU57FI9f5tab_2Lax87KUKjXvdrevgg9XT|NGROK_AUTH|ngrok authtoken|workflow_dispatch|description:" .github/workflows/windows-2025.yml

Repository: Riders004/rdp

Length of output: 4877


Replace the token-like input description
In .github/workflows/windows-2025.yml:8, use a human-readable description here instead of an opaque token-like string; if this is ever a real credential, it will be visible in the workflow UI and repository.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.github/workflows/windows-2025.yml at line 8, The workflow input description
is using an opaque token-like string instead of a human-readable label. Update
the description field in the windows-2025 workflow to a clear, descriptive
phrase, and make sure any similar input metadata in the workflow uses readable
text rather than credential-looking values.

required: false
default: ''

Expand Down