fix command injection problem

chain4travel · Sep 5, 2024 · 5e0e518 · 5e0e518
1 parent 0879af8
commit 5e0e518
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/duplicate_issue.yml b/.github/workflows/duplicate_issue.yml
@@ -18,7 +18,7 @@ jobs:
         repositories: "camino-private-issues"
     - name: Generate Private Issue
       run: |        
-        cat > issue.md<<- EOM
+        cat > issue.md<<- 'EOM'
         ${{ github.event.issue.body }}
 
         ---
@@ -27,7 +27,7 @@ jobs:
         * https://github.com/chain4travel/camino-public-issues/issues/${{ github.event.issue.number }}
         EOM
         ISSUE_BODY=$(cat issue.md)
-        cat > title.md<<- EOM
+        cat > title.md<<- 'EOM'
         ${{ github.event.issue.title }}
         EOM
         TITLE=$(cat title.md)