Skip to content

Commit

Permalink
Remove debug logging from GitHub Actions build
Browse files Browse the repository at this point in the history
As flagged by @lurch, there's no need for us to be logging the current
branches and repositories during a build and it was an unintentional
security vulnerability.
  • Loading branch information
mudge committed Dec 9, 2024
1 parent 96264f7 commit 72861d2
Showing 1 changed file with 0 additions and 9 deletions.
9 changes: 0 additions & 9 deletions .github/workflows/build.yml
Original file line number Diff line number Diff line change
Expand Up @@ -10,15 +10,6 @@ jobs:
build:
runs-on: ubuntu-latest
steps:
- name: Log current branches and repositories
env:
REPO_FULL_NAME: ${{ github.event.pull_request.head.repo.full_name }}
run: |
echo "Current ref: $GITHUB_REF"
echo "Base ref: $GITHUB_BASE_REF"
echo "Head ref: $GITHUB_HEAD_REF"
echo "Repository: $GITHUB_REPOSITORY"
echo "Head repository: $REPO_FULL_NAME"
- name: Only allow pull requests based on master from the develop branch of the current repository
if: ${{ github.base_ref == 'master' && !(github.head_ref == 'develop' && github.event.pull_request.head.repo.full_name == github.repository) }}
run: |
Expand Down

0 comments on commit 72861d2

Please sign in to comment.