feat(scripts/autolabel): use PR-title to find labels #5555
actionlint.yml
on: pull_request
actionlint
18s
ensure-sha-pinned-actions
15s
Annotations
1 error and 1 warning
|
actionlint:
.github/workflows/add_label_from_diff.yaml#L49
[actionlint] reported by reviewdog 🐶
"github.event.pull_request.title" is potentially untrusted. avoid using it directly in inline scripts. instead, pass it through an environment variable. see https://docs.github.com/en/actions/reference/security/secure-use#good-practices-for-mitigating-script-injection-attacks for more details [expression]
Raw Output:
e:.github/workflows/add_label_from_diff.yaml:49:81: "github.event.pull_request.title" is potentially untrusted. avoid using it directly in inline scripts. instead, pass it through an environment variable. see https://docs.github.com/en/actions/reference/security/secure-use#good-practices-for-mitigating-script-injection-attacks for more details [expression]
|
|
actionlint:
.github/workflows/add_label_from_diff.yaml#L49
[actionlint] reported by reviewdog 🐶
shellcheck reported issue in this script: SC2215:warning:3:1: This flag is used as a command name. Bad line break or missing [ .. ]? [shellcheck]
Raw Output:
w:.github/workflows/add_label_from_diff.yaml:49:7: shellcheck reported issue in this script: SC2215:warning:3:1: This flag is used as a command name. Bad line break or missing [ .. ]? [shellcheck]
|