docker/build-push-action
1
0
Fork 0
mirror of https://github.com/docker/build-push-action.git synced 2026-09-11 05:34:22 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1617 from crazy-max/fix-metadata-workflow-commands

Browse Source 
prevent workflow command injection in metadata logs
This commit is contained in:
Tõnis Tiigi
2026-09-10 18:13:15 -07:00
committed by GitHub
parent 104b27ceb2 dcc3c70566
commit 03b4d6cac0
3 changed files with 29 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dist/index.cjs
Generated Vendored
+26 -26
View File
File diff suppressed because one or more lines are too long
dist/index.cjs.map
Generated Vendored
+2 -2
View File
File diff suppressed because one or more lines are too long
src/main.ts
+1 -1
View File
@@ -137,7 +137,7 @@ actionsToolkit.run(
if (metadata) { if (metadata) {
await core.group(`Metadata`, async () => { await core.group(`Metadata`, async () => {
const metadatadt = JSON.stringify(metadata, null, 2); const metadatadt = JSON.stringify(metadata, null, 2);
core.info(metadatadt); GitHub.printUntrusted(metadatadt);
core.setOutput('metadata', metadatadt); core.setOutput('metadata', metadatadt);
}); });
} }