Hotfix issue labeling workflow (infra) (#1623)

Remove arbitrary code execution
canonical · Nov 26, 2024 · f3f3043 · f3f3043
1 parent 41c9278
commit f3f3043
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/.github/workflows/label-cert-blocker-issue.yaml b/.github/workflows/label-cert-blocker-issue.yaml
@@ -13,8 +13,10 @@ jobs:
     steps:
       - name: Check if an issue has a ticked cert-blocker test case mark
         id: check_for_cert_blocker_test_case
+        env:
+          ISSUE_BODY: ${{ github.event.issue.body }}
         run: |
-          if echo "${{ github.event.issue.body }}" | grep -q "\[X\] cert-blocker"; then
+          if echo "$ISSUE_BODY" | grep -q "\[X\] cert-blocker"; then
             echo "found=true" >> $GITHUB_ENV
           else
             echo "found=false" >> $GITHUB_ENV
@@ -28,4 +30,3 @@ jobs:
           GH_REPO: ${{ github.repository }}
           NUMBER: ${{ github.event.issue.number }}
           LABELS: cert-blocker test case
-