Merge pull request #77 from leet4tari/ci-security-pr-title

ci(fix): prevent code injection
tari-project · Dec 6, 2023 · 4a35305 · 4a35305
2 parents b92f855 + ceb9d24
commit 4a35305
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/.github/workflows/pr_title.yml b/.github/workflows/pr_title.yml
@@ -1,5 +1,7 @@
+---
 name: PR
-on:
+
+'on':
   pull_request:
     types:
       - opened
@@ -16,5 +18,7 @@ jobs:
           npm install -g @commitlint/cli @commitlint/config-conventional
           echo "module.exports = {extends: ['@commitlint/config-conventional']}" > commitlint.config.js
       - name: lint
+        env:
+          PR_TITLE: ${{github.event.pull_request.title}}
         run: |
-          echo "${{github.event.pull_request.title}}" | commitlint
+          echo "$PR_TITLE" | commitlint