# Verify branch-based workflow script injections don't work