michael/astro
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix security issue: untrusted ci output

Browse source
This commit is contained in:
Fred K. Schott 2022-02-14 10:43:12 -08:00
parent f84848226d
commit 650fb1aa51
2 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
.github/workflows/issue.yml vendored
View file

@ -12,8 +12,6 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
name: Auto-assign new issues to projects name: Auto-assign new issues to projects
steps: steps:
- run: echo "${{github.event.issue.title}}"
- name: Assign Bugs to the Bug Tracker - name: Assign Bugs to the Bug Tracker
uses: srggrs/assign-one-project-github-action@1.2.1 uses: srggrs/assign-one-project-github-action@1.2.1
if: github.event.action == 'opened' && startsWith(github.event.issue.title, '🐛 BUG:') if: github.event.action == 'opened' && startsWith(github.event.issue.title, '🐛 BUG:')

4
.github/workflows/main.yml vendored
View file

@ -20,8 +20,10 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- id: setup - id: setup
env:
MESSAGE: ${{ github.event.commits[0].message }}
run: | run: |
TRIMMED=$(echo "${{ github.event.commits[0].message }}" | sed '1!d;q') TRIMMED=$(echo "$MESSAGE" | sed '1!d;q')
echo "::set-output name=COMMIT_MSG::${TRIMMED}" echo "::set-output name=COMMIT_MSG::${TRIMMED}"
- name: Send a Discord notification when a PR is merged - name: Send a Discord notification when a PR is merged
env: env: