${{ inputs.operation }} and ${{ inputs.run_url }} were interpolated directly into shell run blocks in the generated maintenance workflow, making them GitHub Actions script-injection sinks (Sonar githubactions:S7630 / CodeQL actions/expression-injection).

Changes

• pkg/workflow/maintenance_workflow_yaml.go — two Record outputs steps fixed:
  • run_operation job: inputs.operation moved to env var
  • apply_safe_outputs job: inputs.run_url moved to env var
• pkg/workflow/side_repo_maintenance.go — same apply_safe_outputs pattern fixed

Applies the env-indirection pattern already used by the adjacent Run operation and Apply Safe Outputs steps in both files:

# Before (vulnerable)
- name: Record outputs
  id: record
  run: echo "run_url=${{ inputs.run_url }}" >> "$GITHUB_OUTPUT"

# After
- name: Record outputs
  id: record
  env:
    GH_AW_RUN_URL: ${{ inputs.run_url }}
  run: echo "run_url=$GH_AW_RUN_URL" >> "$GITHUB_OUTPUT"

Downstream consumers of generated workflows receive the fix on their next gh aw compile.