wesley/load-secrets-action
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Improve the way input is processed to avoid command injection

Browse Source
This commit is contained in:
Eddy Filip
2022-05-18 12:47:49 +03:00
parent e28960dbbb
commit a5debe1b2e
2 changed files with 11 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
action.yml
View File

@@ -11,7 +11,8 @@ inputs:
runs: runs:
using: composite using: composite
steps: steps:
- run: | - shell: bash
export INPUT_UNSET_PREVIOUS=${{ inputs.unset-previous }} env:
INPUT_UNSET_PREVIOUS: ${{ inputs.unset-previous }}
run: |
${{ github.action_path }}/entrypoint.sh ${{ github.action_path }}/entrypoint.sh
shell: bash

9
configure/action.yml
View File

@@ -9,8 +9,9 @@ inputs:
runs: runs:
using: composite using: composite
steps: steps:
- run: | - shell: bash
export INPUT_CONNECT_HOST=${{ inputs.connect-host }} env:
export INPUT_CONNECT_TOKEN=${{ inputs.connect-token }} INPUT_CONNECT_HOST: ${{ inputs.connect-host }}
INPUT_CONNECT_TOKEN: ${{ inputs.connect-token }}
run: |
${{ github.action_path }}/entrypoint.sh ${{ github.action_path }}/entrypoint.sh
shell: bash