From 2845ee4a577870c5d86fc49157a27d6a19f1528a Mon Sep 17 00:00:00 2001
From: "aikido-autofix[bot]"
 <119856028+aikido-autofix[bot]@users.noreply.github.com>
Date: Fri, 24 Apr 2026 00:42:47 +0000
Subject: [PATCH] fix(security): autofix Template Injection in GitHub Workflows
 Action

---
 .github/workflows/build.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ab71d929..7553911f 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -56,8 +56,10 @@ jobs:
         run: yarn nx docker-build ${{ inputs.application }}
 
       - name: Save Docker image to a tar file
+        env:
+          APPLICATION: ${{ inputs.application }}
         run: |
-          docker save ${{ inputs.application }}:latest -o /tmp/${{ inputs.application }}.tar
+          docker save $APPLICATION:latest -o /tmp/$APPLICATION.tar
 
       - name: Upload Docker image as artifact
         uses: actions/upload-artifact@v4