8000 [FSSDK-10665] fix: Github Actions YAML files vulnerable to script inj… · optimizely/python-sdk@40880ff · GitHub
[go: up one dir, main page]
Skip to content

Commit 40880ff

Browse files
FarhanAnjum-optiFarhanAnjum-opti
authored
[FSSDK-10665] fix: Github Actions YAML files vulnerable to script injections corrected (#438)
1 parent 986e615 commit 40880ff

File tree

1 file changed

+7
-3
lines changed

1 file changed

+7
-3
lines changed

‎.github/workflows/integration_test.yml

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -23,14 +23,18 @@ jobs:
2323
path: 'home/runner/travisci-tools'
2424
ref: 'master'
2525
- name: set SDK Branch if PR
26+
env:
27+
HEAD_REF: ${{ github.head_ref }}
2628
if: ${{ github.event_name == 'pull_request' }}
2729
run: |
28-
echo "SDK_BRANCH=${{ github.head_ref }}" >> $GITHUB_ENV
30+
echo "SDK_BRANCH=$HEAD_REF" >> $GITHUB_ENV
2931
- name: set SDK Branch if not pull request
32+
env:
33+
REF_NAME: ${{ github.ref_name }}
3034
if: ${{ github.event_name != 'pull_request' }}
3135
run: |
32-
echo "SDK_BRANCH=${{ github.ref_name }}" >> $GITHUB_ENV
33-
echo "TRAVIS_BRANCH=${{ github.ref_name }}" >> $GITHUB_ENV
36+
echo "SDK_BRANCH=${REF_NAME}" >> $GITHUB_ENV
37+
echo "TRAVIS_BRANCH=${REF_NAME}" >> $GITHUB_ENV
3438
- name: Trigger build
3539
env:
3640
SDK: python

0 commit comments

Comments
 (0)
0