ci(workflows): use environment variables in scripts to prevent command injection #11065
adrianschmidtpr-checks.yml
on: pull_request
Lint
1m 0s
Build
2m 38s
Test
2m 51s
Block Autosquash Commits
12s
Docs
/
Publish Docs
2m 30s
Commitlint
12s
automerge
0s
Annotations
2 errors
|
Lint
Process completed with exit code 1.
|
|
Lint:
publish-docs.js#L385
Replace `shell.exec('git·commit·-m·"$COMMIT_MESSAGE"',·{env:·{...process.env,·COMMIT_MESSAGE:·message}}).code·!==·0` with `⏎········shell.exec('git·commit·-m·"$COMMIT_MESSAGE"',·{⏎············env:·{·...process.env,·COMMIT_MESSAGE:·message·},⏎········}).code·!==·0⏎····`
|