Skip to content

Commit 8433056

Browse files
[SECURITY] additional hardening for new script (- WIP PR #433 -)
Changes in file .github/workflows/CI-CHGLOG.yml: * refactored for new GitHub workflow job naming convention Changes in file generate_changelog.sh: * hardened recursive calls * improved stability in pre-flight checks
1 parent 323c127 commit 8433056

File tree

2 files changed

+2
-3
lines changed

2 files changed

+2
-3
lines changed

.github/workflows/CI-CHGLOG.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -344,7 +344,7 @@ jobs:
344344
retention-days: 2
345345
overwrite: true
346346

347-
chglog_REPORT:
347+
CHGLOG_REPORT:
348348
permissions:
349349
actions: read
350350
contents: write

generate_changelog.sh

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -96,7 +96,6 @@ check_command head ;
9696
check_command sed ;
9797
check_command sort ;
9898
check_command tail ;
99-
check_command tee ;
10099
check_command tr ;
101100
check_command uniq ;
102101
check_command xargs ;
@@ -247,7 +246,7 @@ if [[ -z "${1}" ]] ; then
247246
GIT_PREVIOUS_TAG=$(id_parent_tag "${EACH_TAG}")
248247
if [[ ( -n "${GIT_PREVIOUS_TAG}" ) ]] && [[ ( "${EACH_TAG}" != "${GIT_PREVIOUS_TAG}" ) ]] ; then
249248
FALLBACK_GIT_RANGE="${EACH_TAG}...${GIT_PREVIOUS_TAG}"
250-
"${0}" "${FALLBACK_GIT_RANGE}" || : ; wait ;
249+
"${BASH_SOURCE[0]}" "${FALLBACK_GIT_RANGE}" || : ; wait ;
251250
fi ;
252251
done;
253252
rm -f "${CHGLOG_GIT_LOG_CACHE_FILE}" || : ;

0 commit comments

Comments
 (0)