make-release.yml:42: runtime artifacts potentially vulnerable to a cache poisoning attack: enables caching by default

make-release.yml:116: code injection via template expansion: may expand into attacker-controllable code

make-release.yml:115: code injection via template expansion: may expand into attacker-controllable code

make-release.yml:68: code injection via template expansion: may expand into attacker-controllable code

make-release.yml:6: overly broad permissions: contents: write is overly broad at the workflow level

generate-website-docs.yml:45: dangerous use of GitHub App tokens: app token inherits blanket installation permissions

generate-website-docs.yml:51: dangerous use of GitHub App tokens: token granted access to all repositories for this owner's app installation

generate-website-docs.yml:33: runtime artifacts potentially vulnerable to a cache poisoning attack: enables caching by default

generate-website-docs.yml:28: runtime artifacts potentially vulnerable to a cache poisoning attack: enables caching by default

generate-website-docs.yml:23: runtime artifacts potentially vulnerable to a cache poisoning attack: enables caching by default

generate-website-docs.yml:14: overly broad permissions: default permissions used due to no permissions: block

generate-website-docs.yml:53: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false

generate-website-docs.yml:19: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false

documentation-build.yml:18: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false

cargo-test.yml:26: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false

cargo-fmt.yml:23: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false

cargo-clippy.yml:15: overly broad permissions: default permissions used due to no permissions: block

cargo-clippy.yml:19: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false

cargo-build-stable.yml:22: overly broad permissions: default permissions used due to no permissions: block

cargo-build-stable.yml:26: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false

No file matched to [/home/runner/work/cli/cli/**/*requirements*.txt,/home/runner/work/cli/cli/**/*requirements*.in,/home/runner/work/cli/cli/**/*constraints*.txt,/home/runner/work/cli/cli/**/*constraints*.in,/home/runner/work/cli/cli/**/pyproject.toml,/home/runner/work/cli/cli/**/uv.lock,/home/runner/work/cli/cli/**/*.py.lock]. The cache will never get invalidated. Make sure you have checked out the target repository and configured the cache-dependency-glob input correctly.