From 51cba5a2879edc3a03678b27fdedd46d51b52386 Mon Sep 17 00:00:00 2001 From: Stypox Date: Wed, 26 Apr 2023 18:36:25 +0200 Subject: [PATCH] Make sure CI is not vulnerable to bash word splitting See https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 0ef621c07..90e2b81c7 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -35,7 +35,7 @@ jobs: # See gradle file for difference between downloaders - name: Build and run Tests run: | - if [[ $GITHUB_EVENT_NAME == 'schedule' ]]; then + if [[ "$GITHUB_EVENT_NAME" == 'schedule' ]]; then echo running with real downloader ./gradlew check --stacktrace -Ddownloader=REAL else