action-dotenv-to-setenv
action-dotenv-to-setenv copied to clipboard

c-py

→

Metadata

GitHub Action to export a dotenv file to environment variables (via set-env)

Reame
Issues

Results 3 action-dotenv-to-setenv issues

Sort by recently updated

When variable ends with `=`, it is removed

I have a variable ending with `=`: ``` MY_VAR=abc...xyz= ``` But the final `=` is trimmed away, so what I receive is only `abc...xyz`. Workaround: Quote the value: ``` MY_VAR="abc...xyz="...

varganatt

Command Injection via the `.env` file

Hi @c-py, The action is vulnerable to a command injection vulnerability. This makes workflows that use the action in `pull_request_target` and other contexts with read/write access vulnerable. You may contact...

nikitastupin