Skip to content

Commit 41a3ae5

Browse files
committed
chore(ci): use environment files to add QEMU to PATH
<https://github.blog/changelog/2020-10-01-github-actions-deprecating-set-env-and-add-path-commands/> > A moderate security vulnerability has been identified in the GitHub > Actions runner that can allow environment variable and path injection > in workflows that log untrusted data to STDOUT. This can result in > environment variables being introduced or modified without the > intention of the workflow author. > > [...] > > Action and workflow authors who are setting environment variables via > STDOUT should update any usage of the `set-env` and `add-path` > workflow commands to use the new environment files.
1 parent dfc1b8a commit 41a3ae5

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.github/actions/install-qemu/action.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ runs:
1616
qemu_timestamp=$HOME/.qemu/${{ inputs.version }}
1717
1818
# Add the prefix to path
19-
echo '::add-path::'$qemu_prefix/bin
19+
echo "$qemu_prefix/bin" >> $GITHUB_PATH
2020
2121
# Skip the remaining steps if QEMU has already been built
2222
if [ -f "$qemu_timestamp" ]; then

0 commit comments

Comments
 (0)