CVE-2025-31479

canonical/get-workflow-version-action is a GitHub composite action to get commit SHA that GitHub Actions reusable workflow was called with. Prior to 1.0.1, if the get-workflow-version-action step fails, the exception output may include the GITHUBTOKEN. If the full token is included in the excepti...

PT-2025-14557

Name of the Vulnerable Software and Affected Versions canonical/get-workflow-version-action versions prior to 1.0.1 Description The issue concerns a GitHub composite action that may include the GITHUB TOKEN in exception output if the get-workflow-version-action step fails. Although GitHub...

CVE-2025-31479: Insertion of Sensitive Information into Log File

canonical/get-workflow-version-action is a GitHub composite action to get commit SHA that GitHub Actions reusable workflow was called with. Prior to 1.0.1, if the get-workflow-version-action step fails, the exception output may include the GITHUBTOKEN. If the full token is included in the excepti...