... and fix a shell injection bug

geldata · Jan 19, 2024 · f647468 · f647468
1 parent c13ae1a
commit f647468
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/.github/workflows/pull-request-meta.yml b/.github/workflows/pull-request-meta.yml
@@ -19,12 +19,13 @@ jobs:
         submodules: false
 
     - name: Verify that postgres/ was not changed unintentionally
+      env:
+        PR_TITLE: ${{ github.event.pull_request.title }}
       shell: bash
       run: |
         required_prefix="Update bundled PostgreSQL"
 
-        title="${{ github.event.pull_request.title }}"
-        if [[ $title == $required_prefix* ]]; then
+        if [[ "$PR_TITLE" == $required_prefix* ]]; then
           exit 0
         fi