From 0662600e933688febe362de97270a6c2fb869c0f Mon Sep 17 00:00:00 2001 From: Boris Cherny Date: Mon, 11 Aug 2025 13:38:40 -0700 Subject: [PATCH] Fix GitHub Actions workflow to properly escape issue titles MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Prevents shell execution of backticks in issue titles by using single quotes and sed escaping. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude --- .github/workflows/log-issue-events.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/log-issue-events.yml b/.github/workflows/log-issue-events.yml index 35293744..ae75a66e 100644 --- a/.github/workflows/log-issue-events.yml +++ b/.github/workflows/log-issue-events.yml @@ -20,7 +20,7 @@ jobs: run: | ISSUE_NUMBER=${{ github.event.issue.number }} REPO=${{ github.repository }} - ISSUE_TITLE="${{ github.event.issue.title }}" + ISSUE_TITLE=$(echo '${{ github.event.issue.title }}' | sed "s/'/'\\\\''/g") AUTHOR="${{ github.event.issue.user.login }}" CREATED_AT="${{ github.event.issue.created_at }}" @@ -84,7 +84,7 @@ jobs: run: | ISSUE_NUMBER=${{ github.event.issue.number }} REPO=${{ github.repository }} - ISSUE_TITLE="${{ github.event.issue.title }}" + ISSUE_TITLE=$(echo '${{ github.event.issue.title }}' | sed "s/'/'\\\\''/g") CLOSED_BY="${{ github.event.issue.closed_by.login }}" CLOSED_AT="${{ github.event.issue.closed_at }}" STATE_REASON="${{ github.event.issue.state_reason }}"