Replace manual tmp file creation with tmp library which uses security best practices

2025-08-12 13:42:26 -07:00
parent a62dfeda7b
commit 3ba8e1b39d
6 changed files with 924 additions and 53 deletions
--- a/package.json
+++ b/package.json
@@ -25,9 +25,11 @@
  "dependencies": {
    "@actions/core": "^1.11.1",
    "@modelcontextprotocol/sdk": "^1.15.1",
+    "@types/tmp": "^0.2.6",
    "js-yaml": "^4.1.0",
    "openai": "^5.11.0",
-    "pkce-challenge": "^5.0.0"
+    "pkce-challenge": "^5.0.0",
+    "tmp": "^0.2.4"
  },
  "devDependencies": {
    "@eslint/compat": "^1.3.0",