fix: use template literals in tests so RUNNER_TEMP is evaluated at runtime

Tests were using regular double-quoted strings like
"...${process.env.RUNNER_TEMP}/gh-aw..." which compared against the
literal text "${process.env.RUNNER_TEMP}" instead of the resolved path.
Changed to backtick template literals so the env var is evaluated.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: Mossaka

actions/setup/js/redact_secrets.test.cjs

@@ -46,7 +46,7 @@ describe("redact_secrets.cjs", () => {
     describe("main function integration", () => {
       (it("should scan for built-in patterns even when GH_AW_SECRET_NAMES is not set", async () => {
         (await eval(`(async () => { ${redactScript}; await main(); })()`),
-          expect(mockCore.info).toHaveBeenCalledWith("Starting secret redaction in /tmp/gh-aw and ${process.env.RUNNER_TEMP}/gh-aw directories"),
+          expect(mockCore.info).toHaveBeenCalledWith(`Starting secret redaction in /tmp/gh-aw and ${process.env.RUNNER_TEMP}/gh-aw directories`),
           expect(mockCore.info).toHaveBeenCalledWith(expect.stringContaining("Scanning for built-in credential patterns")));
       }),
         it("should redact secrets from files in /tmp using exact matching", async () => {
@@ -57,7 +57,7 @@ describe("redact_secrets.cjs", () => {
           await eval(`(async () => { ${modifiedScript}; await main(); })()`);
           const redactedContent = fs.readFileSync(testFile, "utf8");
           (expect(redactedContent).toBe("Secret: ***REDACTED*** and another ***REDACTED***"),
-            expect(mockCore.info).toHaveBeenCalledWith("Starting secret redaction in /tmp/gh-aw and ${process.env.RUNNER_TEMP}/gh-aw directories"),
+            expect(mockCore.info).toHaveBeenCalledWith(`Starting secret redaction in /tmp/gh-aw and ${process.env.RUNNER_TEMP}/gh-aw directories`),
             expect(mockCore.info).toHaveBeenCalledWith(expect.stringContaining("Secret redaction complete")));
         }),
         it("should handle multiple file types", async () => {
@@ -123,7 +123,7 @@ describe("redact_secrets.cjs", () => {
           (fs.writeFileSync(testFile, "No secrets here"), (process.env.GH_AW_SECRET_NAMES = "EMPTY_SECRET"), (process.env.SECRET_EMPTY_SECRET = ""));
           const modifiedScript = redactScript.replace('findFiles("/tmp/gh-aw", targetExtensions)', `findFiles("${tempDir.replace(/\\/g, "\\\\")}", targetExtensions)`);
           (await eval(`(async () => { ${modifiedScript}; await main(); })()`),
-            expect(mockCore.info).toHaveBeenCalledWith("Starting secret redaction in /tmp/gh-aw and ${process.env.RUNNER_TEMP}/gh-aw directories"),
+            expect(mockCore.info).toHaveBeenCalledWith(`Starting secret redaction in /tmp/gh-aw and ${process.env.RUNNER_TEMP}/gh-aw directories`),
             expect(mockCore.info).toHaveBeenCalledWith(expect.stringContaining("no secrets found")));
         }),
         it("should handle new file extensions (.md, .mdx, .yml, .jsonl)", async () => {

actions/setup/js/safe_outputs_mcp_server_defaults.test.cjs

@@ -72,8 +72,8 @@ const canWriteDefault = canWriteToDefaultPath();
           setTimeout(() => {
             (child.kill(),
               clearTimeout(timeout),
-              expect(stderr).toContain("GH_AW_SAFE_OUTPUTS not set, using default: ${process.env.RUNNER_TEMP}/gh-aw/safeoutputs/outputs.jsonl"),
-              expect(stderr).toContain("Reading config from file: ${process.env.RUNNER_TEMP}/gh-aw/safeoutputs/config.json"),
+              expect(stderr).toContain(`GH_AW_SAFE_OUTPUTS not set, using default: ${process.env.RUNNER_TEMP}/gh-aw/safeoutputs/outputs.jsonl`),
+              expect(stderr).toContain(`Reading config from file: ${process.env.RUNNER_TEMP}/gh-aw/safeoutputs/config.json`),
               resolve());
           }, 2e3));
       });
@@ -102,7 +102,7 @@ const canWriteDefault = canWriteToDefaultPath();
             (child.kill(),
               clearTimeout(timeout),
               fs.existsSync(defaultConfigFile) && fs.unlinkSync(defaultConfigFile),
-              expect(stderr).toContain("Reading config from file: ${process.env.RUNNER_TEMP}/gh-aw/safeoutputs/config.json"),
+              expect(stderr).toContain(`Reading config from file: ${process.env.RUNNER_TEMP}/gh-aw/safeoutputs/config.json`),
               expect(stderr).toContain("Successfully parsed config from file with 2 configuration keys"),
               expect(stderr).toContain("Final processed config:"),
               expect(stderr).toContain("create_issue"),
@@ -132,7 +132,7 @@ const canWriteDefault = canWriteToDefaultPath();
           setTimeout(() => {
             (child.kill(),
               clearTimeout(timeout),
-              expect(stderr).toContain("Config file does not exist at: ${process.env.RUNNER_TEMP}/gh-aw/safeoutputs/config.json"),
+              expect(stderr).toContain(`Config file does not exist at: ${process.env.RUNNER_TEMP}/gh-aw/safeoutputs/config.json`),
               expect(stderr).toContain("Using minimal default configuration"),
               expect(stderr).toContain("Final processed config: {}"),
               resolve());