Skip to content

Commit 047392c

Browse files
authored
build: fix GitHub Actions expression injection vulnerability (#892)
1 parent 2d7c708 commit 047392c

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

.github/workflows/triage-issue.yml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -56,9 +56,10 @@ jobs:
5656
env:
5757
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
5858
ISSUE_NUMBER: ${{ github.event.issue.number }}
59+
LABELS: ${{ steps.run_script.outputs.labels }}
5960
run: |
6061
# Convert comma-separated labels to gh command arguments
61-
IFS=',' read -ra ADDR <<< "${{ steps.run_script.outputs.labels }}"
62+
IFS=',' read -ra ADDR <<< "$LABELS"
6263
priority_added=false
6364
for i in "${ADDR[@]}"; do
6465
# Trim whitespace

0 commit comments

Comments
 (0)