Fix untrusted input

https://securitylab.github.com/research/github-actions-untrusted-input/
camptocamp · May 1, 2023 · 0706a9b · 0706a9b
1 parent ef489fe
commit 0706a9b
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
@@ -238,8 +238,10 @@ jobs:
         if: env.HAS_SECRETS == 'HAS_SECRETS'
 
       - id: branch
-        run: echo "branch=${{ github.head_ref || github.ref_name }}" >> $GITHUB_OUTPUT
+        run: echo "branch=${GITHUB_REF}" >> $GITHUB_OUTPUT
         if: env.HAS_SECRETS == 'HAS_SECRETS'
+        env:
+          GITHUB_REF: ${{ github.head_ref || github.ref_name }}
 
       - uses: actions/download-artifact@v3
         with: