From 054264ecb36109b8a8a946a6d0a23650087fb289 Mon Sep 17 00:00:00 2001
From: Andrea Lamparelli <a.lamparelli95@gmail.com>
Date: Mon, 19 Jun 2023 08:54:22 +0200
Subject: [PATCH] [BXMSPROD-2064] set untrusted input as intermediate env
 variable

---
 .ci/actions/parse-labels/action.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.ci/actions/parse-labels/action.yml b/.ci/actions/parse-labels/action.yml
index 970a9603f2e..b61e2af6538 100644
--- a/.ci/actions/parse-labels/action.yml
+++ b/.ci/actions/parse-labels/action.yml
@@ -36,5 +36,8 @@ runs:
         echo "targets=$(echo $targets)" >> $GITHUB_OUTPUT
     
     - name: Printing extracted targets
+      env:
+        # set untrusted input to intermediate env variable
+        TARGETS: ${{ steps.extract-targets.outputs.targets }}
       shell: bash
-      run: echo "Extracted target branches ${{ steps.extract-targets.outputs.targets }}"
+      run: echo "Extracted target branches $TARGETS"