[WEB-2770] [Aikido] AI Fix for Template Injection in GitHub Workflows Action

[aikido-autofix]

This patch mitigates template injection vulnerabilities in GitHub Workflows by replacing direct references with an environment variable.

Aikido used AI to generate this PR.

High confidence: Aikido has a robust set of benchmarks for similar fixes, and they are proven to be effective.

---

Important

Mitigates template injection in GitHub Actions by using environment variables in check-changeset.yml.

• Security Fix:
  • Mitigates template injection vulnerabilities in .github/workflows/check-changeset.yml by replacing direct template references with environment variables.
  • Affects Check for changeset step by using PR_BASE_REF, PR_HEAD_REF, and PR_HEAD_SHA environment variables.
• AI Contribution:
  • Aikido AI generated this PR with high confidence based on benchmarks for similar fixes.

^{This description was created by for eb30042. You can customize this summary. It will automatically update as commits are pushed.}

[ellipsis-dev]

Caution

Changes requested ❌

Reviewed everything up to eb30042 in 1 minute and 53 seconds. Click for details.

• Reviewed 32 lines of code in 1 files
• Skipped 0 files when reviewing.
• Skipped posting 1 draft comments. View those below.
• Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.

1. .github/workflows/check-changeset.yml:33

• Draft comment:
  The inline shell script performing changeset checks is quite heavy. Consider extracting this logic into a separate script file or service for better readability and maintainability.
• Reason this comment was not posted:
  Comment was on unchanged code.

Workflow ID: wflow_CQMvJEe4fCx4v54O

^{You can customize by changing your verbosity settings, reacting with 👍 or 👎, replying to comments, or adding code review rules.}