tektoncd pipelines-as-code

• CVE-2026-54167 High 8.2 Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header 0.3%
• CVE-2026-54168 Medium 6.5 Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution 0.6%