Skip to content

Commit 033af31

Browse files
authored
Fix vulnerability in cross-repo-issue GitHub action (#4324)
1 parent 01acd95 commit 033af31

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

.github/workflows/cross-repo-issue.yml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,9 +23,10 @@ jobs:
2323
github.event.pull_request.merged
2424
env:
2525
GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
26+
PR_TITLE: ${{ github.event.pull_request.title }}
2627
run: |
2728
echo -e "A PR was merged over on PBS-Java\n\n- [https://github.com/prebid/prebid-server-java/pull/${{github.event.number}}](https://github.com/prebid/prebid-server-java/pull/${{github.event.number}})\n- timestamp: ${{ github.event.pull_request.merged_at}}" > msg
2829
export msg=$(cat msg)
29-
gh issue create --repo prebid/prebid-server --title "Port PR from PBS-Java: ${{ github.event.pull_request.title }}" \
30+
gh issue create --repo prebid/prebid-server --title "Port PR from PBS-Java: $PR_TITLE" \
3031
--body "$msg" \
3132
--label auto

0 commit comments

Comments
 (0)