Skip to content

Commit dd0207f

Browse files
lloyd-c137lloyd-c137
andauthored
fix: shell injection safety via github.ref_name in publish workflow (#10327)
Co-authored-by: lloyd-c137 <[email protected]>
1 parent 286851e commit dd0207f

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

‎.github/workflows/publish.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141
run: pnpm build
4242

4343
- name: Publish to npm
44-
run: npm i -g npm@^11.5.2 && pnpm run publish-ci ${{ github.ref_name }}
44+
run: npm i -g npm@^11.5.2 && pnpm run publish-ci "${{ github.ref_name }}"
4545

4646
- name: Generate Changelog
4747
run: npx changelogithub

0 commit comments

Comments
 (0)