mikepenz/release-changelog-builder-action
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #217 from wdoug/fix-workflow-security-issue

Browse Source 
Fix security vulnerability in workflow
This commit is contained in:
Mike Penz
2021-03-06 16:44:30 +01:00
committed by GitHub
parent be6c2169f1 9ec45b47e5
commit bc70116ce2
1 changed files with 13 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/ci.yml
+12 -4
View File
@@ -37,7 +37,9 @@ jobs:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Echo Configuration without Checkout Changelog - name: Echo Configuration without Checkout Changelog
run: echo "${{steps.without_checkout.outputs.changelog}}" env:
CHANGELOG: ${{ steps.without_checkout.outputs.changelog }}
run: echo "CHANGELOG"
- name: Checkout - name: Checkout
uses: actions/checkout@v2 uses: actions/checkout@v2
@@ -52,7 +54,9 @@ jobs:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Echo Minimal Configuration Changelog - name: Echo Minimal Configuration Changelog
run: echo "${{steps.minimal_release.outputs.changelog}}" env:
CHANGELOG: ${{ steps.minimal_release.outputs.changelog }}
run: echo "$CHANGELOG"
# Showcases a more complex configuration, providing a configuration, and specifically referencing owner, repo, from and to tag # Showcases a more complex configuration, providing a configuration, and specifically referencing owner, repo, from and to tag
- name: "Complex Configuration" - name: "Complex Configuration"
@@ -67,7 +71,9 @@ jobs:
token: ${{ secrets.GITHUB_TOKEN }} token: ${{ secrets.GITHUB_TOKEN }}
- name: Echo Complex Configuration Changelog - name: Echo Complex Configuration Changelog
run: echo "${{steps.complex_release.outputs.changelog}}" env:
CHANGELOG: ${{ steps.complex_release.outputs.changelog }}
run: echo "CHANGELOG"
# Showcases the capability to generate the changelog for an external repository provided # Showcases the capability to generate the changelog for an external repository provided
- name: "External Repo Configuration" - name: "External Repo Configuration"
@@ -82,7 +88,9 @@ jobs:
token: ${{ secrets.PERSONAL_TOKEN }} token: ${{ secrets.PERSONAL_TOKEN }}
- name: Echo External Repo Configuration Changelog - name: Echo External Repo Configuration Changelog
run: echo "${{steps.external_changelog.outputs.changelog}}" env:
CHANGELOG: ${{ steps.external_changelog.outputs.changelog }}
run: echo "$CHANGELOG"
release: release:
if: startsWith(github.ref, 'refs/tags/') if: startsWith(github.ref, 'refs/tags/')