Skip to content

Commit 071d437

Browse files
[FSSDK-10665] fix: Github Actions YAML files vulnerable to script injections corrected (#425)
1 parent 80395e9 commit 071d437

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

.github/workflows/integration_test.yml

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,8 @@ on:
99
jobs:
1010
test:
1111
runs-on: ubuntu-latest
12+
env:
13+
HEAD_REF: ${{ github.head_ref }}
1214
steps:
1315
- uses: actions/checkout@v3
1416
with:
@@ -20,11 +22,11 @@ jobs:
2022
- name: set SDK Branch if PR
2123
if: ${{ github.event_name == 'pull_request' }}
2224
run: |
23-
echo "SDK_BRANCH=${{ github.head_ref }}" >> $GITHUB_ENV
25+
echo "SDK_BRANCH=$HEAD_REF" >> $GITHUB_ENV
2426
- name: set SDK Branch if not pull request
2527
if: ${{ github.event_name != 'pull_request' }}
2628
run: |
27-
echo "SDK_BRANCH=${{ github.ref_name }}" >> $GITHUB_ENV
29+
echo "SDK_BRANCH=$HEAD_REF" >> $GITHUB_ENV
2830
- name: Trigger build
2931
env:
3032
SDK: agent

0 commit comments

Comments
 (0)