From 0d1b3f9941e99db26bc56f31b5f3af9450880102 Mon Sep 17 00:00:00 2001
From: Daniel Izdebski <spidiritsu@gmail.com>
Date: Thu, 14 Sep 2023 17:22:49 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=91=B7=20chore(ci):=20Sanitize=20PR=20tit?=
 =?UTF-8?q?le=20in=20`.github/workflows`?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/pr.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 3f0130fa0..d2e19e7cc 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -29,5 +29,9 @@ jobs:
           pnpm add $CONFIG_PACKAGE
 
       - name: Validate PR title
+        env:
+          # Sanitizing PR title as documented here:
+          # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
+          PR_TITLE: "${{ github.event.pull_request.title }}"
         run: |
-          echo "${{ github.event.pull_request.title }}" | pnpm -s dlx commitlint
+          echo $PR_TITLE | pnpm -s dlx commitlint