FYI: Using the action like in the example would make you vulnerable to pwn requests

[ST-DDT]

The current run-nothing example is safe, but running anything in there that uses the source code is dangerous as it uses elevated permissions.
I'll recommend rewriting/removing the example or raising awareness by adding a comment.

CSVDash/.github/workflows/labeler.yml

Lines 18 to 19 in 2ac1699

	echo "Running frontend tests..."
	# Put your commands for running frontend tests here

CSVDash/.github/workflows/labeler.yml

Lines 24 to 25 in 2ac1699

	echo "Running backend tests..."
	# Put your commands for running backend tests here

• https://securitylab.github.com/research/github-actions-preventing-pwn-requests
• Description seems dangerous actions/labeler#755 (comment)

[github-actions]

Message that will be displayed on users' first issue