Sulkta-OSS/straw
3
0
Fork 0
Code Issues 1 Pull requests 10 Projects Releases Packages Wiki Activity Actions

Fix CI command injection vulnerability

Browse source 
See https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions
This commit is contained in:
Stypox 2023-04-26 16:01:20 +02:00
parent 417b66f912
commit 1df8a59aa4
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
.github/workflows/ci.yml vendored
View file

@ -42,7 +42,9 @@ jobs:
- name: create and checkout branch - name: create and checkout branch
# push events already checked out the branch # push events already checked out the branch
if: github.event_name == 'pull_request' if: github.event_name == 'pull_request'
run: git checkout -B ${{ github.head_ref }} env:
BRANCH: ${{ github.head_ref }}
run: git checkout -B "$BRANCH"
- name: set up JDK 17 - name: set up JDK 17
uses: actions/setup-java@v3 uses: actions/setup-java@v3