chore: fix issue validation workflow

chore: prevent code injection
2026-06-29 18:09:55 +02:00 · 2025-12-02 01:05:21 +04:00 · 2025-12-02 00:29:12 +04:00
2 changed files with 4 additions and 3 deletions
@@ -115,13 +115,14 @@ jobs:
      - name: Parse validation result and take action
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          RESPONSE_FILE: ${{ steps.validate.outputs.response-file }}
+          RESPONSE: ${{ steps.validate.outputs.response }}
        run: |
          # Prefer reading from the response file to avoid output truncation
-          RESPONSE_FILE='${{ steps.validate.outputs.response-file }}'
          if [ -n "$RESPONSE_FILE" ] && [ -f "$RESPONSE_FILE" ]; then
            RAW_OUTPUT=$(cat "$RESPONSE_FILE")
          else
-            RAW_OUTPUT='${{ steps.validate.outputs.response }}'
+            RAW_OUTPUT="$RESPONSE"
          fi

          # Extract JSON if wrapped in markdown code fences; otherwise use raw
@@ -25,8 +25,8 @@ jobs:
        id: get-release
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          TAG_NAME: ${{ github.event.workflow_run.head_branch }}
        run: |
-          TAG_NAME="${{ github.event.workflow_run.head_branch }}"
          echo "tag-name=$TAG_NAME" >> $GITHUB_OUTPUT

          # Get release info by tag
Author	SHA1	Message	Date
zhom	fe2125beba	chore: fix issue validation workflow	2025-12-02 01:05:21 +04:00
zhom	23cfa84998	chore: prevent code injection	2025-12-02 00:29:12 +04:00