chore: protect against command injection

medic · Jun 26, 2024 · 0d12c6d · 0d12c6d
1 parent 80dff8f
commit 0d12c6d
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/conventional-commits.yml b/.github/workflows/conventional-commits.yml
@@ -21,4 +21,6 @@ jobs:
       - name: Install dependencies
         run: npm ci
       - name: Lint title
-        run: npx --no-install commitlint <<< "${{ github.event.pull_request.title }}"
+        env:
+          TITLE: ${{ github.event.pull_request.title }}
+        run: npx --no-install commitlint <<< "$TITLE"