From 499985d18d4f0f15e8a59afbad090a5818e5fa48 Mon Sep 17 00:00:00 2001 From: Joyce Date: Tue, 14 Feb 2023 15:04:59 -0300 Subject: [PATCH] fix: dangerous workflow (#3669) Signed-off-by: Joyce Brum --- .github/workflows/release-image.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release-image.yaml b/.github/workflows/release-image.yaml index 45740073f1..c50dd5272f 100644 --- a/.github/workflows/release-image.yaml +++ b/.github/workflows/release-image.yaml @@ -33,11 +33,11 @@ jobs: run: npm run build - name: Create release image + env: + BODY: ${{ github.event.pull_request.body }} run: | # Store the PR body contents containing the changelog in 'release.md' - cat <<'EOF' > release.md - ${{ github.event.pull_request.body }} - EOF + echo "$BODY" > release.md # Only render the pull request content including and after the "# # Releases" heading. node_modules/.bin/release-image -m <(sed -n '/# Releases/,$p' release.md)