Skip to content

Conversation

@Jaxelr
Copy link
Member

@Jaxelr Jaxelr commented Dec 3, 2025

No description provided.

@Jaxelr Jaxelr requested a review from a team as a code owner December 3, 2025 16:01
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR refactors the GitHub Action to improve security and maintainability by mapping inputs to environment variables instead of directly interpolating them in the PowerShell script. This approach helps prevent potential injection issues and makes the script more robust.

Key Changes:

  • Added INPUT_* environment variable mappings for all action inputs
  • Updated PowerShell script to read from environment variables using $env:INPUT_* instead of direct ${{ inputs.* }} interpolation
  • Added explicit validation for the required endpoint input

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@Jaxelr
Copy link
Member Author

Jaxelr commented Dec 4, 2025

Tested for functionality using github action sample (this is untrusted by design, since its a test):

image

@Jaxelr Jaxelr merged commit 34bc367 into Azure:main Dec 4, 2025
1 check passed
@Jaxelr Jaxelr deleted the fix/envvar branch December 4, 2025 20:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants