search

ExodusMovement / lerna-release-action

Selectively release packages from a lerna monorepo
0 stars 0 forks source link

fix: further harden `add` #41

Closed sparten11740 closed 7 months ago

sparten11740 commented 7 months ago

Further hardens add in case some future code changes make it possible for an attacker to pass shell: true to spawnSync. Also updates our spawnSync to prevent consumers from passing in shell: true

Captured from https://github.com/ExodusMovement/lerna-release-action/pull/40#discussion_r1523536060