Merge pull request #1617 from crazy-max/fix-metadata-workflow-commands

prevent workflow command injection in metadata logs
chore: update generated content
2026-09-28 00:14:03 +08:00 · 2026-09-10 18:13:15 -07:00 · 2026-09-10 10:11:25 +02:00 · 2026-09-10 10:11:24 +02:00
3 changed files with 29 additions and 29 deletions
@@ -137,7 +137,7 @@ actionsToolkit.run(
    if (metadata) {
      await core.group(`Metadata`, async () => {
        const metadatadt = JSON.stringify(metadata, null, 2);
-        core.info(metadatadt);
+        GitHub.printUntrusted(metadatadt);
        core.setOutput('metadata', metadatadt);
      });
    }
Author	SHA1	Message	Date
Tõnis Tiigi	03b4d6cac0	Merge pull request #1617 from crazy-max/fix-metadata-workflow-commands prevent workflow command injection in metadata logs	2026-09-10 18:13:15 -07:00
CrazyMax	dcc3c70566	chore: update generated content Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-09-10 10:11:25 +02:00
CrazyMax	2145b7d858	prevent workflow command injection in metadata logs Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-09-10 10:11:24 +02:00