actions/importer-issue-ops
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #7 from actions/command-injection-bounty

Browse Source 
Mitigate command injection vulnerability
This commit is contained in:
Ethan Dennis
2022-12-13 10:55:26 -08:00
committed by GitHub
parent f9e0aa0d46 630b7bbd94
commit a6eac1f5b7
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/issue_ops.yml
+5 -2
View File
@@ -58,9 +58,12 @@ jobs:
run: bundle install --without development run: bundle install --without development
- name: Prepare arguments - name: Prepare arguments
id: prepare id: prepare
env:
ISSUE_BODY: ${{ github.event.issue.body }}
COMMENT_BODY: ${{ github.event.comment.body }}
LABELS: ${{ toJSON(github.event.issue.labels.*.name) }}
run: | run: |
echo "${{ toJSON(github.event.issue.labels.*.name) }}" ./bin/parse_issue "${{ env.ISSUE_BODY }}" "${{ env.COMMENT_BODY }}" "${{ env.LABELS }}"
./bin/parse_issue "${{ github.event.issue.body }}" "${{ github.event.comment.body }}" "${{ toJSON(github.event.issue.labels.*.name) }}"
- name: Validate arguments - name: Validate arguments
run: | run: |
if [ -z "${{ steps.prepare.outputs.provider }}" ]; then if [ -z "${{ steps.prepare.outputs.provider }}" ]; then