Skip to content

MCP server  args  templating corrupts values containing nested  ${VAR:-${VAR2:-$(cmd)}}  shell parameter expansion (silent auth/token corruption) #3720

MCP server  args  templating corrupts values containing nested  ${VAR:-${VAR2:-$(cmd)}}  shell parameter expansion (silent auth/token corruption)

MCP server  args  templating corrupts values containing nested  ${VAR:-${VAR2:-$(cmd)}}  shell parameter expansion (silent auth/token corruption) #3720

Triggered via issue July 24, 2026 03:22
Status Success
Total duration 14s
Artifacts
close-issue
4s
close-issue
Fit to window
Zoom out
Zoom in

Annotations

1 warning
close-issue
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/github-script@v7. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/