From cb90dd6a6b7d3ef3656258b4e46fb8e5103d8046 Mon Sep 17 00:00:00 2001 From: anupamme Date: Wed, 5 Aug 2026 06:36:29 +0000 Subject: [PATCH] fix: yaml.github-actions.security.run-shell-injection.run-shell-injection security vulnerability Automated security fix generated by OrbisAI Security Signed-off-by: anupamme --- .../..github/workflows/create-test-branch.yml | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/app/multi-tenant/central-space/cap-js-incidents-app/..github/workflows/create-test-branch.yml b/app/multi-tenant/central-space/cap-js-incidents-app/..github/workflows/create-test-branch.yml index fce146ac..d75d6f6c 100644 --- a/app/multi-tenant/central-space/cap-js-incidents-app/..github/workflows/create-test-branch.yml +++ b/app/multi-tenant/central-space/cap-js-incidents-app/..github/workflows/create-test-branch.yml @@ -8,7 +8,7 @@ jobs: runs-on: ubuntu-latest name: Build and Push steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 token: ${{ secrets.TECH_USER_TOKEN }} @@ -32,10 +32,12 @@ jobs: echo "AUTHOR_NAME=$LAST_COMMIT_NAME" >> $GITHUB_ENV - name: Push + env: + COMMIT_MESSAGE: ${{ github.event.head_commit.message }} run: | - git config --global user.email "${{ env.AUTHOR_EMAIL }}" - git config --global user.name "${{ env.AUTHOR_NAME }}" + git config --global user.email "$AUTHOR_EMAIL" + git config --global user.name "$AUTHOR_NAME" # Add and commit changes locally git add . - git commit -m "${{ github.event.head_commit.message }}" + git commit -m "$COMMIT_MESSAGE" git push --force-with-lease origin HEAD:cds-test-integrate