Skip to content

Commit d766a36

Browse files
committed
Update github action setup-go to version 1.1.3
Fixes a security vulnerability that allowed environment variables and path injection in workflows that log untrusted data to STDOUT, possibly resulting in environment variables being introducd or modified without the intention of the workflow operator. Ref: https://github.blog/changelog/2020-10-01-github-actions-deprecating-set-env-and-add-path-commands/
1 parent 820e285 commit d766a36

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.github/workflows/go.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ jobs:
1212
runs-on: ubuntu-latest
1313
steps:
1414
- name: Set up Go 1.13
15-
uses: actions/[email protected].2
15+
uses: actions/[email protected].3
1616
with:
1717
go-version: 1.13
1818
id: go

0 commit comments

Comments
 (0)