Skip to content

Commit 65462f4

Browse files
Potential fix for code scanning alert no. 10: Code injection
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
1 parent 00f1ade commit 65462f4

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

.github/workflows/generate-manifest.yml

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -46,13 +46,15 @@ jobs:
4646
- name: Extract repository URL from issue
4747
id: extract-url
4848
if: github.event_name == 'issues'
49+
env:
50+
ISSUE_BODY: ${{ github.event.issue.body }}
4951
run: |
5052
# Extract the repository URL from the GitHub issue form
5153
# The form renders the repository field as a URL line after the label
52-
REPO_URL=$(echo '${{ github.event.issue.body }}' | grep -oP 'https://github\.com/[^\s]+' | head -1)
54+
REPO_URL=$(echo "$ISSUE_BODY" | grep -oP 'https://github\.com/[^\s]+' | head -1)
5355
if [ -z "$REPO_URL" ]; then
5456
echo "No GitHub repository URL found in issue body"
55-
echo "Issue body: ${{ github.event.issue.body }}"
57+
echo "Issue body: $ISSUE_BODY"
5658
exit 1
5759
fi
5860
echo "Found repository URL: $REPO_URL"

0 commit comments

Comments
 (0)