GHSL-2026-199: Code execution in DataDog/trivy API Diff Check workflow
Published Sep 4, 2026
·Updated
The API Diff Check workflow invokes a pull request-controlled local action in a privileged pullrequesttarget job. An external contributor can execute arbitrary code with a write-scoped GITHUBTOKEN and access the ORGREPOTOKEN secret.
Event History
Sep 4, 2026
Advisory Published
via GitHub Security Lab·12:00 AM
Data Sourced
via GitHub Security Lab·12:00 AM
Description
Frequently Asked Questions
1
Who can exploit this workflow weakness?
An external contributor who can open or influence a pull request can exploit it, because the affected job uses pull_request_target while invoking a pull request-controlled local action.
2
What access could an attacker gain through successful exploitation?
The attacker can execute arbitrary code with a write-scoped GITHUB_TOKEN and access to the ORG_REPO_TOKEN secret.
3
Is a repository affected only when maintainers run the workflow manually?
No. The issue is in the API Diff Check workflow's privileged pull_request_target job, which processes pull request-controlled action content.