I think he means template-injection -- https://woodruffw.github.io/zizmor/audits...

		theteapot 14 days ago \| parent \| context \| favorite \| on: GitHub is investigating unauthorized access to the... I think he means template-injection -- https://woodruffw.github.io/zizmor/audits/#template-injectio...

Yes that's it.