ci: [DSEC-25506] Fix security issue in GitHub actions (#532)

Co-authored-by: sahani-deriv <[email protected]> Co-authored-by: mobile-apps-deriv <[email protected]> Co-authored-by: GitHub Actions <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: sahani-deriv <[email protected]> Co-authored-by: Ahrar <[email protected]>
deriv-com · Mar 15, 2024 · c088ab0 · c088ab0
1 parent 203c456
commit c088ab0
Showing 1 changed file with 7 additions and 3 deletions.
diff --git a/.github/actions/send_slack_notifications/action.yml b/.github/actions/send_slack_notifications/action.yml
@@ -14,6 +14,10 @@ runs:
   using: composite
   steps:
     - name: Send Slack Notification on Package Update
+      env:
+          SLACK_WEBHOOK_PACKAGE_UPDATE: ${{ inputs.SLACK_WEBHOOK_PACKAGE_UPDATE }}
+          PR_TITLE: ${{ inputs.PR_TITLE }}
+          TAGS: ${{ inputs.TAGS }}
       run: |
         curl -X POST -H 'Content-type: application/json' \
         --data '{
@@ -29,17 +33,17 @@ runs:
                 "type": "section",
                 "text": {
                   "type": "mrkdwn",
-                  "text": "*${{ inputs.PR_TITLE }}*"
+                  "text": "*$PR_TITLE*"
                 }
               },
               {
                 "type": "section",
                 "text": {
                   "type": "mrkdwn",
-                  "text": "*Packages released:*\n- *${{ inputs.TAGS }}*\n*Changelog:* https://github.com/regentmarkets/flutter-deriv-packages/blob/master/CHANGELOG.md"
+                  "text": "*Packages released:*\n- *$TAGS*\n*Changelog:* https://github.com/regentmarkets/flutter-deriv-packages/blob/master/CHANGELOG.md"
               }
             }
           ]
         }' \
-          ${{ inputs.SLACK_WEBHOOK_PACKAGE_UPDATE }}
+          $SLACK_WEBHOOK_PACKAGE_UPDATE
       shell: bash