Skip to content

Commit e813bfe

Browse files
[FSSDK-10665] fix: Github Actions YAML files vulnerable to script injections corrected (#548)
1 parent 7cd42fc commit e813bfe

File tree

1 file changed

+8
-4
lines changed

1 file changed

+8
-4
lines changed

.github/workflows/integration_test.yml

+8-4
Original file line numberDiff line numberDiff line change
@@ -23,15 +23,19 @@ jobs:
2323
path: 'home/runner/travisci-tools'
2424
ref: 'master'
2525
- name: set SDK Branch if PR
26+
env:
27+
HEAD_REF: ${{ github.head_ref }}
2628
if: ${{ github.event_name == 'pull_request' }}
2729
run: |
28-
echo "SDK_BRANCH=${{ github.head_ref }}" >> $GITHUB_ENV
29-
echo "TRAVIS_BRANCH=${{ github.head_ref }}" >> $GITHUB_ENV
30+
echo "SDK_BRANCH=$HEAD_REF" >> $GITHUB_ENV
31+
echo "TRAVIS_BRANCH=$HEAD_REF" >> $GITHUB_ENV
3032
- name: set SDK Branch if not pull request
33+
env:
34+
REF_NAME: ${{ github.ref_name }}
3135
if: ${{ github.event_name != 'pull_request' }}
3236
run: |
33-
echo "SDK_BRANCH=${{ github.ref_name }}" >> $GITHUB_ENV
34-
echo "TRAVIS_BRANCH=${{ github.ref_name }}" >> $GITHUB_ENV
37+
echo "SDK_BRANCH=$REF_NAME" >> $GITHUB_ENV
38+
echo "TRAVIS_BRANCH=$REF_NAME" >> $GITHUB_ENV
3539
- name: Trigger build
3640
env:
3741
SDK: java

0 commit comments

Comments
 (0)