Run a scenario across every SDK: sdk-matrix workflow, script and toolchain image - #496

Draft

pcarleton wants to merge 10 commits into

mainfrom

paulc/sdk-matrix

GitHub Advanced Security / CodeQL failed Sep 7, 2026 in 4s

2 new alerts including 2 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

2 high

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 220 in .github/workflows/sdk-matrix.yml

Code scanning / CodeQL

Cache Poisoning via execution of untrusted code High

Potential cache poisoning in the context of the default branch due to privilege checkout of untrusted code from

. (

).
Potential cache poisoning in the context of the default branch due to privilege checkout of untrusted code from

. (

).

Check failure on line 230 in .github/workflows/sdk-matrix.yml

Code scanning / CodeQL

Cache Poisoning via execution of untrusted code High

Potential cache poisoning in the context of the default branch due to privilege checkout of untrusted code from

. (

).
Potential cache poisoning in the context of the default branch due to privilege checkout of untrusted code from

. (

).