[Aikido][Critical] Using unsafe GitHub Actions trigger may allow privilege escalation via CI/CD (1 location) #2572

Aikido critical finding

• Repository: cauldron
• Type: sast
• Branches: develop
• Findings in this fix group: 1
• Earliest SLA date: 2026-10-01
• First detected: 2026-09-16
• Exploit status: no_known_exploit
• CWE: CWE-114

Attacker can execute unauthorized processes

Remediation

• Fix each location below; see the Aikido link for rule-specific guidance.

Findings

Created from an Aikido export. Close this issue once Aikido no longer reports the findings above.