Skip to content

Commit b41a11d

Browse files
committed
Fix command injection vulnerability in GitHub Actions workflow - Changed line 35 from direct template interpolation to safe environment variable usage with proper double-quoting to prevent shell injection attacks.
1 parent 3e4cb1b commit b41a11d

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

.github/workflows/summary.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
3333
- name: Comment with AI summary
3434
run: |
35-
gh issue comment $ISSUE_NUMBER --body '${{ steps.inference.outputs.response }}'
35+
gh issue comment $ISSUE_NUMBER --body "$RESPONSE"
3636
env:
3737
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
3838
ISSUE_NUMBER: ${{ github.event.issue.number }}

0 commit comments

Comments
 (0)