fix: avoid shell interpretation of PR body in CI workflows#1280
Merged
fix: avoid shell interpretation of PR body in CI workflows#1280
Conversation
Use environment variables and printf instead of direct template substitution to prevent backticks and special characters in PR body from being interpreted as shell commands.
Contributor
|
📦 Plugin has been packaged for this PR. You can download |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #1280 +/- ##
===========================================
Coverage 54.681% 54.681%
Complexity 2748 2748
===========================================
Files 289 289
Lines 15329 15329
Branches 3714 3714
===========================================
Hits 8382 8382
Misses 5245 5245
Partials 1702 1702
Flags with carried forward coverage won't be shown. Click here to find out more. Continue to review full report in Codecov by Sentry.
🚀 New features to boost your workflow:
|
This was referenced Mar 15, 2026
Merged
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Fix CI workflow failures caused by special characters (backticks, single quotes, etc.) in PR body text being interpreted as shell commands.
Problem
Both pr-package.yml and pr-close-issue.yml used direct GitHub Actions template substitution inside shell scripts:
This causes the PR body content to be injected directly into the shell script, where backticks are interpreted as command substitution and single quotes break quoting. This led to CI failures like:
Fix
Pass the PR body as an environment variable and use printf to write it safely:
This avoids any shell interpretation of the PR body content.