ci: bash escape vulnerability (#6640)

Co-authored-by: EYHN <[email protected]> Co-authored-by: LongYinan <[email protected]>
toeverything · Apr 22, 2024 · f288e3e · f288e3e
1 parent d7e0821
commit f288e3e
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/.github/workflows/pr-title-lint.yml b/.github/workflows/pr-title-lint.yml
@@ -25,4 +25,7 @@ jobs:
           node-version-file: '.nvmrc'
       - name: Install dependencies
         run: yarn workspaces focus @affine/commitlint-config
-      - run: echo "${{ github.event.pull_request.title }}" | yarn workspace @affine/commitlint-config commitlint -g ./.commitlintrc.json
+      - name: Check PR title
+        env:
+          TITLE: ${{ github.event.pull_request.title }}
+        run: echo "$TITLE" | yarn workspace @affine/commitlint-config commitlint -g ./.commitlintrc.json