Skip to content

Commit

Permalink
.github: Update post tag workflow to use env files
Browse files Browse the repository at this point in the history
The post tag workflow used the set-env command to
set the TAG_NAME env variable. The set-env command is
now disabled due to a security vulnerability in the GitHub Actions
runner that can allow environment variable and path injection in
workflows that log untrusted data to STDOUT. For more information see:
https://github.blog/changelog/2020-10-01-github-actions-deprecating-set-env-and-add-path-commands/

This change updates the workflow to remove
usage of the set-env command to use environment files
instead.

Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com>
  • Loading branch information
ashutosh-narkar committed Nov 23, 2020
1 parent 5c6c963 commit 38ab0e1
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion .github/workflows/post-tag.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ jobs:

- name: Set TAG_NAME in Environment
# Subsequent jobs will be have the computed tag name
run: echo ::set-env name=TAG_NAME::"${GITHUB_REF##*/}"
run: echo "TAG_NAME=${GITHUB_REF##*/}" >> $GITHUB_ENV

- name: Test
run: make ci-release-test
Expand Down

0 comments on commit 38ab0e1

Please sign in to comment.