Fix code injection in the release-artifacts.yml workflow

2026-08-28 05:04:38 +00:00 · 2026-07-14 15:52:19 +02:00
parent 5776c401b4
commit 7a07dded5a
1 changed files with 2 additions and 1 deletions
@@ -204,8 +204,9 @@ jobs:
      - name: Attach to release
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          REF_NAME: ${{ github.ref_name }}
        run: |
-          gh release upload "${{ github.ref_name }}" \
+          gh release upload "$REF_NAME" \
            Sdist/* \
            Wheel*/* \
            debs.tar.xz \