Skip to content

Commit f5bd635

Browse files
aikido-autofix[bot]triceo
authored andcommitted
fix(security): autofix Template Injection in GitHub Workflows Action
1 parent 7b4a636 commit f5bd635

1 file changed

Lines changed: 4 additions & 2 deletions

File tree

.github/workflows/release.yml

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -65,10 +65,12 @@ jobs:
6565
# This step will fail if the Solver binaries aren't already on Maven Central.
6666
- name: Create release branch and build release
6767
working-directory: ./timefold-quickstarts
68+
env:
69+
JAVA_VERSION: ${{ github.event.inputs.javaVersion }}
6870
run: |
6971
mvn verify
70-
git commit -am "build: switch to version ${{ github.event.inputs.javaVersion }}"
71-
git tag -a "v${{ github.event.inputs.javaVersion }}" -m "Release version ${{ github.event.inputs.javaVersion }}"
72+
git commit -am "build: switch to version $JAVA_VERSION"
73+
git tag -a "v$JAVA_VERSION" -m "Release version $JAVA_VERSION"
7274
git push --tags
7375
7476
# Merge the release branch into the stable branch.

0 commit comments

Comments
 (0)