4040 - name : Get original info
4141 id : get-info
4242 run : |
43+ # Inputs in workflow_info.json are already sanitized and safe to use
44+
4345 original_event=$(jq -r '.event' ./artifacts/parent-artifacts/workflow_info.json)
4446 original_action=$(jq -r '.action' ./artifacts/parent-artifacts/workflow_info.json)
4547 original_sha=$(jq -r '.sha' ./artifacts/parent-artifacts/workflow_info.json)
@@ -48,44 +50,24 @@ jobs:
4850 original_run_id=$(jq -r '.run_id' ./artifacts/parent-artifacts/workflow_info.json)
4951
5052 hw_tests_enabled=$(jq -r '.hw_tests_enabled' ./artifacts/parent-artifacts/workflow_info.json)
51- hw_targets=$(jq -r '.hw_targets' ./artifacts/parent-artifacts/workflow_info.json)
52- hw_types=$(jq -r '.hw_types' ./artifacts/parent-artifacts/workflow_info.json)
53+ hw_targets=$(jq -c '.hw_targets' ./artifacts/parent-artifacts/workflow_info.json)
54+ hw_types=$(jq -c '.hw_types' ./artifacts/parent-artifacts/workflow_info.json)
5355 wokwi_tests_enabled=$(jq -r '.wokwi_tests_enabled' ./artifacts/parent-artifacts/workflow_info.json)
54- wokwi_targets=$(jq -r '.wokwi_targets' ./artifacts/parent-artifacts/workflow_info.json)
55- wokwi_types=$(jq -r '.wokwi_types' ./artifacts/parent-artifacts/workflow_info.json)
56+ wokwi_targets=$(jq -c '.wokwi_targets' ./artifacts/parent-artifacts/workflow_info.json)
57+ wokwi_types=$(jq -c '.wokwi_types' ./artifacts/parent-artifacts/workflow_info.json)
5658 qemu_tests_enabled=$(jq -r '.qemu_tests_enabled' ./artifacts/parent-artifacts/workflow_info.json)
57- qemu_targets=$(jq -r '.qemu_targets' ./artifacts/parent-artifacts/workflow_info.json)
58- qemu_types=$(jq -r '.qemu_types' ./artifacts/parent-artifacts/workflow_info.json)
59+ qemu_targets=$(jq -c '.qemu_targets' ./artifacts/parent-artifacts/workflow_info.json)
60+ qemu_types=$(jq -c '.qemu_types' ./artifacts/parent-artifacts/workflow_info.json)
5961
6062 hw_tests_enabled=$(jq -r '.hw_tests_enabled' ./artifacts/parent-artifacts/workflow_info.json)
61- hw_targets=$(jq -r '.hw_targets' ./artifacts/parent-artifacts/workflow_info.json)
62- hw_types=$(jq -r '.hw_types' ./artifacts/parent-artifacts/workflow_info.json)
63+ hw_targets=$(jq -c '.hw_targets' ./artifacts/parent-artifacts/workflow_info.json)
64+ hw_types=$(jq -c '.hw_types' ./artifacts/parent-artifacts/workflow_info.json)
6365 wokwi_tests_enabled=$(jq -r '.wokwi_tests_enabled' ./artifacts/parent-artifacts/workflow_info.json)
64- wokwi_targets=$(jq -r '.wokwi_targets' ./artifacts/parent-artifacts/workflow_info.json)
65- wokwi_types=$(jq -r '.wokwi_types' ./artifacts/parent-artifacts/workflow_info.json)
66+ wokwi_targets=$(jq -c '.wokwi_targets' ./artifacts/parent-artifacts/workflow_info.json)
67+ wokwi_types=$(jq -c '.wokwi_types' ./artifacts/parent-artifacts/workflow_info.json)
6668 qemu_tests_enabled=$(jq -r '.qemu_tests_enabled' ./artifacts/parent-artifacts/workflow_info.json)
67- qemu_targets=$(jq -r '.qemu_targets' ./artifacts/parent-artifacts/workflow_info.json)
68- qemu_types=$(jq -r '.qemu_types' ./artifacts/parent-artifacts/workflow_info.json)
69-
70- # Sanitize the values to avoid security issues
71-
72- # Event: Allow alphabetical characters and underscores
73- original_event=$(echo "$original_event" | tr -cd '[:alpha:]_')
74-
75- # Action: Allow alphabetical characters and underscores
76- original_action=$(echo "$original_action" | tr -cd '[:alpha:]_')
77-
78- # SHA: Allow alphanumeric characters
79- original_sha=$(echo "$original_sha" | tr -cd '[:alnum:]')
80-
81- # Ref: Allow alphanumeric characters, slashes, underscores, dots, and dashes
82- original_ref=$(echo "$original_ref" | tr -cd '[:alnum:]/_.-')
83-
84- # Conclusion: Allow alphabetical characters and underscores
85- original_conclusion=$(echo "$original_conclusion" | tr -cd '[:alpha:]_')
86-
87- # Run ID: Allow numeric characters
88- original_run_id=$(echo "$original_run_id" | tr -cd '[:digit:]')
69+ qemu_targets=$(jq -c '.qemu_targets' ./artifacts/parent-artifacts/workflow_info.json)
70+ qemu_types=$(jq -c '.qemu_types' ./artifacts/parent-artifacts/workflow_info.json)
8971
9072 echo "hw_tests_enabled=$hw_tests_enabled" >> $GITHUB_OUTPUT
9173 echo "hw_targets=$hw_targets" >> $GITHUB_OUTPUT
0 commit comments