starred/openobserve
1
0
Fork 0
mirror of https://github.com/openobserve/openobserve.git synced 2026-11-04 16:09:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

ci: fix github workflow vulnerability

Browse Source
This commit is contained in:
mmosarafO2
2026-01-26 03:04:25 -08:00
committed by Prabhat Sharma
parent ab0055655d
commit 38c0a51660
1 changed files with 3 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/log-issues-to-o2.yml
+3 -7
View File
@@ -18,11 +18,7 @@ jobs:
ISSUE_BODY: ${{ github.event.issue.body }}
COMMENT_BODY: ${{ github.event.comment.body }}
run: |
# Process the body content safely (already in env vars)
ISSUE_BODY_PROCESSED=$(printf '%s' "$ISSUE_BODY" | tr '\n' ' ' | sed 's/"/\\"/g')
COMMENT_BODY_PROCESSED=$(printf '%s' "$COMMENT_BODY" | tr '\n' ' ' | sed 's/"/\\"/g')
# Build payload using jq to properly handle JSON
# Build payload using jq to properly handle JSON (jq --arg handles all escaping safely)
jq -n \
--arg event_name "${{ github.event_name }}" \
--arg action "${{ github.event.action }}" \
@@ -75,7 +71,7 @@ jobs:
--arg issue_updated_at "${{ github.event.issue.updated_at }}" \
--arg issue_closed_at "${{ github.event.issue.closed_at }}" \
--arg issue_author_association "${{ github.event.issue.author_association }}" \
--arg issue_body "$ISSUE_BODY_PROCESSED" \
--arg issue_body "$ISSUE_BODY" \
--arg comment_id "${{ github.event.comment.id }}" \
--arg comment_node_id "${{ github.event.comment.node_id }}" \
--arg comment_user_login "${{ github.event.comment.user.login }}" \
@@ -86,7 +82,7 @@ jobs:
--arg comment_created_at "${{ github.event.comment.created_at }}" \
--arg comment_updated_at "${{ github.event.comment.updated_at }}" \
--arg comment_author_association "${{ github.event.comment.author_association }}" \
--arg comment_body "$COMMENT_BODY_PROCESSED" \
--arg comment_body "$COMMENT_BODY" \
--arg sender_login "${{ github.event.sender.login }}" \
--arg sender_id "${{ github.event.sender.id }}" \
--arg sender_node_id "${{ github.event.sender.node_id }}" \