chore: avoid script injections

Signed-off-by: James Petersen <[email protected]>
edera-dev · Dec 10, 2024 · 9040db3 · 9040db3
1 parent a0611e8
commit 9040db3
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 3 deletions.
diff --git a/.github/workflows/helm-test.yaml b/.github/workflows/helm-test.yaml
@@ -33,14 +33,19 @@ jobs:
       - name: Run chart-testing (list-changed)
         id: list-changed
         run: |
-          changed=$(ct list-changed --target-branch ${{ github.event.repository.default_branch }})
+          changed=$(ct list-changed --target-branch ${DEFAULT_BRANCH})
           if [[ -n "$changed" ]]; then
             echo "changed=true" >> "$GITHUB_OUTPUT"
           fi
+        env:
+          DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
 
       - name: Run chart-testing (lint)
         if: steps.list-changed.outputs.changed == 'true'
-        run: ct lint --target-branch ${{ github.event.repository.default_branch }}
+        run: |
+          ct lint --target-branch ${DEFAULT_BRANCH}
+        env:
+          DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
 
       - name: Check README diff
         if: steps.list-changed.outputs.changed == 'true'
@@ -58,4 +63,7 @@ jobs:
 
       - name: Run chart-testing (install)
         if: steps.list-changed.outputs.changed == 'true'
-        run: ct install --target-branch ${{ github.event.repository.default_branch }}
+        run: |
+          ct install --target-branch ${DEFAULT_BRANCH}
+        env:
+          DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
diff --git a/.github/workflows/release-artifacts.yml → .github/workflows/release-artifacts.yaml b/.github/workflows/release-artifacts.yml → .github/workflows/release-artifacts.yaml