1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-07-25 18:17:44 +00:00

CI: Disable variable substitution on input to the twitter script

This prevents command injection through backticks in commit messages.
This commit is contained in:
Idan Horowitz 2021-08-15 21:50:12 +03:00 committed by Ali Mohammad Pur
parent 788472f91a
commit 6602ab27e1

View file

@ -14,7 +14,7 @@ jobs:
node-version: '14'
- run: npm i twit
- run: |
node ${{ github.workspace }}/Meta/tweet-commits.js << EOF
node ${{ github.workspace }}/Meta/tweet-commits.js << 'EOF'
${{ toJSON(github.event) }}
EOF
env: