0291ef7e46
Currently, we get the value of the PR body into a variable, by injecting it into a variable definition. This has two problems: 1. If the PR body has a `'` character in it, then the string definition will terminate there, and cause an syntax error in the rest of the script. 2. This is prone to [script injections as documented by GitHub](https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#understanding-the-risk-of-script-injections). |
||
|---|---|---|
| .. | ||
| ISSUE_TEMPLATE | ||
| workflows | ||
| config-test.json | ||
| config.json | ||
| config.yml | ||
| labeler.yml | ||
| pull_request_template.md | ||
| release-drafter-template.yml | ||
| reviewers.yml | ||
| semantic.yml | ||