From f288e3ee2515813461cb5cbb52d9b9753c11d3d3 Mon Sep 17 00:00:00 2001 From: random-dudde <166710163+random-dudde@users.noreply.github.com> Date: Mon, 22 Apr 2024 08:30:11 +0200 Subject: [PATCH] ci: bash escape vulnerability (#6640) Co-authored-by: EYHN Co-authored-by: LongYinan --- .github/workflows/pr-title-lint.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/pr-title-lint.yml b/.github/workflows/pr-title-lint.yml index 5cab44c6d..a6a6790fd 100644 --- a/.github/workflows/pr-title-lint.yml +++ b/.github/workflows/pr-title-lint.yml @@ -25,4 +25,7 @@ jobs: node-version-file: '.nvmrc' - name: Install dependencies run: yarn workspaces focus @affine/commitlint-config - - run: echo "${{ github.event.pull_request.title }}" | yarn workspace @affine/commitlint-config commitlint -g ./.commitlintrc.json + - name: Check PR title + env: + TITLE: ${{ github.event.pull_request.title }} + run: echo "$TITLE" | yarn workspace @affine/commitlint-config commitlint -g ./.commitlintrc.json