docker/bake-action
0
0
Fork 0
mirror of https://github.com/docker/bake-action.git synced 2026-10-14 11:20:27 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #509 from crazy-max/fix-metadata-workflow-commands

Browse Source 
prevent workflow command injection in metadata logs
This commit is contained in:
Tõnis Tiigi
2026-09-10 18:13:35 -07:00
committed by GitHub
parent 2d51777c5e 4d7ac129ad
commit d9969b0cc9
3 changed files with 15 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dist/index.cjs
Generated Vendored
+12 -12
View File
File diff suppressed because one or more lines are too long
dist/index.cjs.map
Generated Vendored
+2 -2
View File
File diff suppressed because one or more lines are too long
src/main.ts
+1 -1
View File
@@ -176,7 +176,7 @@ actionsToolkit.run(
if (metadata) {
await core.group(`Metadata`, async () => {
const metadatadt = JSON.stringify(metadata, null, 2);
core.info(metadatadt);
GitHub.printUntrusted(metadatadt);
core.setOutput('metadata', metadatadt);
});
}