Protect against malicious branch names

This commit is contained in:
Tom Hughes 2024-12-07 17:04:03 +00:00
parent fe81ac334c
commit d598623305

View file

@ -24,10 +24,10 @@ jobs:
bundler-cache: true
- name: Create base branch
run: |
git fetch ${{ github.event.pull_request.base.repo.clone_url }} ${{ github.event.pull_request.base.ref }}:danger_base
git fetch ${{ github.event.pull_request.base.repo.clone_url }} ${{ github.event.pull_request.base.sha }}:danger_base
- name: Create head branch
run: |
git fetch ${{ github.event.pull_request.head.repo.clone_url }} ${{ github.event.pull_request.head.ref }}:danger_head
git fetch ${{ github.event.pull_request.head.repo.clone_url }} ${{ github.event.pull_request.head.sha }}:danger_head
- name: Danger
env:
DANGER_GITHUB_BEARER_TOKEN: ${{ secrets.GITHUB_TOKEN }}