awslabs / aws-mobile-appsync-sdk-android

Android SDK for AWS AppSync.
https://docs.amplify.aws/sdk/api/graphql/q/platform/android/
Apache License 2.0
105 stars 58 forks source link

chore: mitigate github action script injection vulnerability #416

Closed ankpshah closed 1 year ago

ankpshah commented 1 year ago

Issue #, if available:

*Description of changes: Github Actions script injection risks explained here: https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#understanding-the-risk-of-script-injections

Note: I have wrapped shell variables in double quote to avoid word splitting(https://github.com/koalaman/shellcheck/wiki/SC2086), https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.