fix: check input version before exec cmd

ref: #9
opt-nc · Apr 11, 2023 · 02d087b · 02d087b
1 parent 870a3e9
commit 02d087b
Show file tree

Hide file tree

Showing 3 changed files with 27 additions and 11 deletions.
diff --git a/dist/index.js b/dist/index.js
diff --git a/dist/index.js.map b/dist/index.js.map
diff --git a/lib.js b/lib.js
@@ -30,6 +30,12 @@ module.exports = async function () {
                 core.warning(`🆕 DuckDb ${latestVersion} is available.`);
         }
 
+        const regex = '^v[0-9]*.[0-9]*.[0-9]*$';
+        if(!selectedVersion.match(regex)) {
+            core.error("Version not valid.");
+            throw "Version not valid.";
+        }
+
         core.info(`📥 Installing DuckDB version : ${selectedVersion}`);
         const url = `https://github.com/duckdb/duckdb/releases/download/${selectedVersion}/duckdb_cli-linux-amd64.zip`
         const wgetCmd = `wget ${url}`