👷 chore(ci): Sanitize PR title in .github/workflows/pr.yml

Synthetixio · Sep 14, 2023 · 9091d17 · 9091d17
1 parent 0a640ea
commit 9091d17
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
@@ -29,5 +29,9 @@ jobs:
           pnpm add $CONFIG_PACKAGE
 
       - name: Validate PR title
+        env:
+          # Sanitizing PR title as documented here:
+          # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
+          PR_TITLE: "${{ github.event.pull_request.title }}"
         run: |
-          echo "${{ github.event.pull_request.title }}" | pnpm -s dlx commitlint
+          echo $PR_TITLE | pnpm -s dlx commitlint