Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header
High severity
GitHub Reviewed
Published
Jun 19, 2026
in
tektoncd/pipelines-as-code
•
Updated Aug 20, 2026
Give feedback on Dependabot alerts