Safely pass comment JSON to script

actions/github-script#56 (comment)
SheepTester · Aug 17, 2024 · e79947f · e79947f
1 parent eeb3a82
commit e79947f
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/comment.yml b/.github/workflows/comment.yml
@@ -12,7 +12,9 @@ jobs:
       - uses: actions/checkout@v4
       - run: npm install
       - name: Write to data/comments.yml
-        run: npx tsx dev/add-comment.ts '${{ toJson(github.event) }}'
+        env:
+          COMMENT: ${{ toJson(github.event) }}
+        run: npx tsx dev/add-comment.ts $COMMENT
       - name: Build
         run: npm run build
       - name: Upload artifact