mirrors/NewPipe
1
0
Fork 0
mirror of https://github.com/TeamNewPipe/NewPipe synced 2025-10-24 20:07:39 +00:00
Code Issues Releases Wiki Activity

Merge pull request from GHSA-r3gv-6fw7-hc52

Browse Source 
Fix CI command injection vulnerability
This commit is contained in:
Tobi
2023-04-27 22:51:54 +02:00
committed by GitHub
parent da30e539df 43b0167a3a
commit ed1781133c
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.github/workflows/ci.yml vendored
View File

@@ -42,7 +42,9 @@ jobs:
- name: create and checkout branch
# push events already checked out the branch
if: github.event_name == 'pull_request'
run: git checkout -B ${{ github.head_ref }}
env:
BRANCH: ${{ github.head_ref }}
run: git checkout -B "$BRANCH"
- name: set up JDK 17
uses: actions/setup-java@v3