Skip to content

Commit 64a498b

Browse files
Copilotgcatanese
andcommitted
fix: prevent command injection in format workflow by using environment variable
Co-authored-by: gcatanese <1771700+gcatanese@users.noreply.github.com>
1 parent 20f15b6 commit 64a498b

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

.github/workflows/format.yml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -36,9 +36,11 @@ jobs:
3636
run: mvn spotless:apply
3737

3838
- name: Commit and Push Changes
39+
env:
40+
BOT_EMAIL: ${{ secrets.ADYEN_AUTOMATION_BOT_EMAIL }}
3941
run: |
4042
git config user.name AdyenAutomationBot
41-
git config user.email "${{ secrets.ADYEN_AUTOMATION_BOT_EMAIL }}"
43+
git config user.email "$BOT_EMAIL"
4244
git add .
4345
if git diff --cached --quiet; then
4446
echo "No changes to commit."

0 commit comments

Comments
 (0)