docker/build-push-action
1
0
Fork 0
mirror of https://github.com/docker/build-push-action.git synced 2026-09-12 14:04:30 +02:00
Code Issues Packages Projects Releases Wiki Activity

prevent workflow command injection in metadata logs

Browse Source 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
This commit is contained in:
CrazyMax
2026-09-10 10:11:24 +02:00
parent 104b27ceb2
commit 2145b7d858
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/main.ts
+1 -1
View File
@@ -137,7 +137,7 @@ actionsToolkit.run(
if (metadata) { if (metadata) {
await core.group(`Metadata`, async () => { await core.group(`Metadata`, async () => {
const metadatadt = JSON.stringify(metadata, null, 2); const metadatadt = JSON.stringify(metadata, null, 2);
core.info(metadatadt); GitHub.printUntrusted(metadatadt);
core.setOutput('metadata', metadatadt); core.setOutput('metadata', metadatadt);
}); });
} }