Skip to content

Commit

Permalink
ci: wrap untrusted input into variables
Browse files Browse the repository at this point in the history
  • Loading branch information
rainx committed Dec 18, 2023
1 parent 0bad4bd commit 758e4e1
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,7 @@ jobs:
NPM_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}
run: |
npm config set //registry.npmjs.org/:_authToken "${NPM_TOKEN}"
preid=$(sed -e s:/:-:g <<<${{ github.head_ref }}).${{ github.run_number }}.${{ github.run_attempt }}
preid="${HEAD_REF//\//-}".${{ github.run_number }}.${{ github.run_attempt }}
npm --no-git-tag-version version prerelease --preid="${preid}"
pnpm publish --no-git-checks --access public --tag development
Expand Down

0 comments on commit 758e4e1

Please sign in to comment.