Skip to content

Commit ccfad2e

Browse files
aikido-autofix[bot]triceo
authored andcommitted
fix(security): autofix Template Injection in GitHub Workflows Action
1 parent d6f721e commit ccfad2e

1 file changed

Lines changed: 6 additions & 3 deletions

File tree

.github/workflows/release.yml

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -73,13 +73,16 @@ jobs:
7373
# Technically, this goes against the main reason for doing a dry run; to eliminate potential problems.
7474
# But unless something catastrophic happened, PR checks on source branch already ensured that all tests pass.
7575
- name: Set release version and build release
76+
env:
77+
VERSION: ${{ github.event.inputs.version }}
78+
DRY_RUN: ${{ github.event.inputs.dryRun }}
7679
run: |
77-
./mvnw -Dfull versions:set -DnewVersion=${{ github.event.inputs.version }}
78-
./mvnw -Dfull deploy -DskipTests=${{ github.event.inputs.dryRun }} -DaltDeploymentRepository=local::default::file://`pwd`/target/staging-deploy
80+
./mvnw -Dfull versions:set -DnewVersion=$VERSION
81+
./mvnw -Dfull deploy -DskipTests=$DRY_RUN -DaltDeploymentRepository=local::default::file://`pwd`/target/staging-deploy
7982
cp docs/target/antora.yml docs/src/antora.yml
8083
git add docs/src/antora.yml
8184
find . -name 'pom.xml' | xargs git add
82-
git commit -m "build: release version ${{ github.event.inputs.version }}"
85+
git commit -m "build: release version $VERSION"
8386
git push origin $RELEASE_BRANCH_NAME
8487
8588
- name: Run JReleaser

0 commit comments

Comments
 (0)