langchain
6c308aab - Use the GitHub-suggested safer pattern for shell interpolation. (#9567)

Commit
2 years ago
Use the GitHub-suggested safer pattern for shell interpolation. (#9567) Using `${{ }}` to construct shell commands is risky, since the `${{ }}` interpolation runs first and ignores shell quoting rules. This means that shell commands that look safely quoted, like `echo "${{ github.event.issue.title }}"`, are actually vulnerable to shell injection. More details here: https://github.blog/2023-08-09-four-tips-to-keep-your-github-actions-workflows-secure/
Author
Parents
Loading