security: GHSA-5q6q-9pp2-4jv8 (#3544)

OSC · May 6, 2024 · 89e6aa9 · 89e6aa9
1 parent 43aa06d
commit 89e6aa9
Showing 1 changed file with 4 additions and 7 deletions.
diff --git a/.github/workflows/document-merge.yml b/.github/workflows/document-merge.yml
@@ -14,12 +14,13 @@ jobs:
   create-doc-issue:
     runs-on: ubuntu-latest
     if: github.event.pull_request.merged == true
+    env:
+      PR_NUM: ${{ github.event.pull_request.number }}
+      TITLE: ${{ github.event.pull_request.title }}
     steps:
       - name: Create an issue on the documentation repository
         if: contains(github.event.pull_request.labels.*.name, 'needs doc')
         run: |
-          PR_NUM=${{ github.event.pull_request.number }}
-          TITLE="${{ github.event.pull_request.title }}"
           BODY="{
              \"title\": \"$TITLE\",
              \"body\": \"Create documentation for https://github.com/OSC/ondemand/pull/$PR_NUM\"
@@ -34,8 +35,6 @@ jobs:
       - name: Create an issue on the puppet repository
         if: contains(github.event.pull_request.labels.*.name, 'needs automation')
         run: |
-          PR_NUM=${{ github.event.pull_request.number }}
-          TITLE="${{ github.event.pull_request.title }}"
           BODY="{
              \"title\": \"$TITLE\",
              \"body\": \"Create automation for https://github.com/OSC/ondemand/pull/$PR_NUM\"
@@ -50,8 +49,6 @@ jobs:
       - name: Create an issue on the ansible repository
         if: contains(github.event.pull_request.labels.*.name, 'needs automation')
         run: |
-          PR_NUM=${{ github.event.pull_request.number }}
-          TITLE="${{ github.event.pull_request.title }}"
           BODY="{
              \"title\": \"$TITLE\",
              \"body\": \"Create automation for https://github.com/OSC/ondemand/pull/$PR_NUM\"
@@ -61,4 +58,4 @@ jobs:
           --url https://api.github.com/repos/OSC/ood-ansible/issues \
           --header 'Authorization: token ${{ secrets.OSC_ROBOT_GH_PUB_REPO_TOKEN }}' \
           --header 'content-type: application/json' \
-          --data "$BODY"
+          --data "$BODY"