Secure setup action config

[dnkolegov-ar]

This PR hardens the GitHub action config.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	commonware-mcp	4c1fdde	Jan 08 2026, 05:20 PM

[cloudflare-workers-and-pages]

Deploying monorepo with    Cloudflare Pages

Latest commit:	4c1fdde
Status:	✅  Deploy successful!
Preview URL:	https://809cf85c.monorepo-eu0.pages.dev
Branch Preview URL:	https://denis-secure-setup-action.monorepo-eu0.pages.dev

View logs

[cursor]

Unclosed quote causes bash syntax error in workflow

High Severity

The line echo "Target: "${INPUT_TARGET}" has malformed quoting - the string "Target: " is closed, then ${INPUT_TARGET} is unquoted, and a trailing " opens a new quote that's never closed. This causes a bash syntax error that will fail the workflow. Additionally, the original code printed $TARGET (the potentially-modified value) but this prints ${INPUT_TARGET} (the raw input), which changes the debugging output behavior.

 

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.20%. Comparing base (ff8fefb) to head (4c1fdde).
⚠️ Report is 20 commits behind head on main.

@@            Coverage Diff             @@
##             main    #2709      +/-   ##
==========================================
+ Coverage   92.82%   93.20%   +0.37%     
==========================================
  Files         361      372      +11     
  Lines      106797   113359    +6562     
==========================================
+ Hits        99134   105655    +6521     
- Misses       7663     7704      +41     

see 152 files with indirect coverage changes

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ff8fefb...4c1fdde. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.