Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ci: use intermediate env vars for commitlint job #67

Merged
merged 1 commit into from
Dec 13, 2024

Conversation

koooosh
Copy link
Contributor

@koooosh koooosh commented Nov 25, 2024

Issue #, if available:

Closes #66

Description of changes:

The current commitlint workflow (specifically this step) takes raw user-controlled input.

This PR updates the impacted step to use intermediate environment variables for the user-controlled input, follow this best practice.

Testing

Sample run

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@koooosh
Copy link
Contributor Author

koooosh commented Dec 4, 2024

CI build license error fixed in this PR: #68

@koooosh koooosh requested review from cbgbt and KCSesh December 4, 2024 23:26
@koooosh koooosh marked this pull request as ready for review December 6, 2024 00:07
@koooosh
Copy link
Contributor Author

koooosh commented Dec 9, 2024

^ Force push removes the quotes around individual env vars for the --help-url parameter

@koooosh
Copy link
Contributor Author

koooosh commented Dec 10, 2024

^ Force push adds consistent formatting for all env vars

@koooosh koooosh requested a review from yeazelm December 10, 2024 02:14
@koooosh koooosh merged commit 5ba2c48 into bottlerocket-os:develop Dec 13, 2024
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Follow best security practices for commitlint workflow
3 participants