pypa/gh-action-pypi-publish vulnerabilities (GitHub Actions)
2 vulnerabilities.
pypa/gh-action-pypi-publishGitHub Actionspypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI9.3 Criticalpypa/gh-action-pypi-publishGitHub ActionsPyPI publish GitHub Action vulnerable to injectable expression expansions in action steps0.0 None