Skip to content

Commit c0a8eb9

Browse files
committed
Use $RUNNER_TEMP for good measure
`runner.temp` is not user-controlled but we replace it with `$RUNNER_TEMP` in any case.
1 parent 286fd68 commit c0a8eb9

File tree

1 file changed

+1
-3
lines changed
  • .github/actions/check-codescanning-config

1 file changed

+1
-3
lines changed

.github/actions/check-codescanning-config/action.yml

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -62,13 +62,11 @@ runs:
6262
- name: Check config
6363
working-directory: ${{ github.action_path }}
6464
shell: bash
65-
run: ts-node ./index.ts "${{ runner.temp }}/user-config.yaml" '$EXPECTED_CONFIG_FILE_CONTENTS'
65+
run: ts-node ./index.ts "$RUNNER_TEMP/user-config.yaml" '$EXPECTED_CONFIG_FILE_CONTENTS'
6666

6767
- name: Clean up
6868
shell: bash
6969
if: always()
7070
run: |
71-
rm -rf ${{ runner.temp }}/codescanning-config-cli-test
72-
rm -rf ${{ runner.temp }}/user-config.yaml
7371
rm -rf $RUNNER_TEMP/codescanning-config-cli-test
7472
rm -rf $RUNNER_TEMP/user-config.yaml

0 commit comments

Comments
 (0)