ci: fix expression injection in action workflow (#1320)

bucketeer-io · Nov 7, 2024 · f32e4c9 · f32e4c9
1 parent a812032
commit f32e4c9
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/push-image.yaml b/.github/workflows/push-image.yaml
@@ -61,7 +61,9 @@ jobs:
         run: echo "value=${GITHUB_REF##*/}" >> $GITHUB_OUTPUT
       - name: Store the first line of commit message
         id: commit_message
-        run: echo "value=$(echo "${{ github.event.head_commit.message }}" | head -n 1)" >> $GITHUB_OUTPUT
+        env:
+          COMMIT_MESSAGE: ${{ github.event.head_commit.message }}
+        run: echo "value=$(echo "$COMMIT_MESSAGE" | head -n 1)" >> $GITHUB_OUTPUT
       - name: Store the migration_required value to output
         uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
         id: changes