docker/build-push-action
1
0
Fork 0
mirror of https://github.com/docker/build-push-action.git synced 2026-09-15 02:07:16 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1617 from crazy-max/fix-metadata-workflow-commands

Browse Source 
prevent workflow command injection in metadata logs
This commit is contained in:
Tõnis Tiigi 2026-09-10 18:13:15 -07:00 committed by GitHub
commit 03b4d6cac0
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 29 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

52
dist/index.cjs generated vendored
View File

File diff suppressed because one or more lines are too long

4
dist/index.cjs.map generated vendored
View File

File diff suppressed because one or more lines are too long

2
src/main.ts
View File

@ -137,7 +137,7 @@ actionsToolkit.run(
if (metadata) { if (metadata) {
await core.group(`Metadata`, async () => { await core.group(`Metadata`, async () => {
const metadatadt = JSON.stringify(metadata, null, 2); const metadatadt = JSON.stringify(metadata, null, 2);
core.info(metadatadt); GitHub.printUntrusted(metadatadt);
core.setOutput('metadata', metadatadt); core.setOutput('metadata', metadatadt);
}); });
} }