From 72861d2a63f3010531d179864f39d5cb37909820 Mon Sep 17 00:00:00 2001 From: Paul Mucur Date: Mon, 9 Dec 2024 08:18:04 +0000 Subject: [PATCH] Remove debug logging from GitHub Actions build As flagged by @lurch, there's no need for us to be logging the current branches and repositories during a build and it was an unintentional security vulnerability. --- .github/workflows/build.yml | 9 --------- 1 file changed, 9 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 047317f22..2231cc290 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -10,15 +10,6 @@ jobs: build: runs-on: ubuntu-latest steps: - - name: Log current branches and repositories - env: - REPO_FULL_NAME: ${{ github.event.pull_request.head.repo.full_name }} - run: | - echo "Current ref: $GITHUB_REF" - echo "Base ref: $GITHUB_BASE_REF" - echo "Head ref: $GITHUB_HEAD_REF" - echo "Repository: $GITHUB_REPOSITORY" - echo "Head repository: $REPO_FULL_NAME" - name: Only allow pull requests based on master from the develop branch of the current repository if: ${{ github.base_ref == 'master' && !(github.head_ref == 'develop' && github.event.pull_request.head.repo.full_name == github.repository) }} run: |