Last active
April 15, 2026 05:05
-
-
Save SheepTester/d8deb4afbecaae4003bba7831b736953 to your computer and use it in GitHub Desktop.
trying to fix command injection in https://github.com/pink10000/gathering/
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: wheeze | |
| on: | |
| issues: | |
| types: opened | |
| jobs: | |
| splegh: | |
| name: cough | |
| if: ${{ contains(github.event.issue.labels.*.name, 'question') }} | |
| runs-on: ubuntu-latest | |
| concurrency: | |
| group: ${{ github.workflow }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Write to data/comments.yml | |
| env: | |
| ISSUE_BODY: ${{ github.event.issue.body }} | |
| run: echo "$ISSUE_BODY" >> websites.toml | |
| - name: Push changes | |
| run: | | |
| git config --local user.name 'Github Actions: ${{ github.action }} (for @${{ github.event.sender.login }})' | |
| git config --local user.email '${{ github.event.sender.login }}@users.noreply.github.com' | |
| git checkout -b add-${{ github.event.issue.number }} | |
| git add websites.toml | |
| git commit -m "add @${{ github.event.sender.login }} | |
| Resolves #${{ github.event.issue.number }}" | |
| git push -u origin add-${{ github.event.issue.number }} | |
| gh pr create --title "Add @${{ github.event.sender.login }}" --body "Adds @${{ github.event.sender.login }} | |
| Resolves #${{ github.event.issue.number }}" | |
| gh issue comment ${{ github.event.issue.number }} --body "ok." | |
| permissions: | |
| contents: write | |
| issues: write | |
| pull-requests: write | |
| env: | |
| GH_TOKEN: ${{ github.token }} |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "eval() is GOOD" | |
| on: | |
| issue_comment: | |
| types: created | |
| jobs: | |
| boing: | |
| name: "knock knock" | |
| if: ${{ github.event.sender.login == 'SheepTester' }} | |
| runs-on: ubuntu-latest | |
| concurrency: | |
| group: ${{ github.workflow }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Write to data/comments.yml | |
| run: echo '${{ github.event.comment.body }}' | |
| permissions: | |
| contents: write | |
| issues: write | |
| pull-requests: write | |
| env: | |
| GH_TOKEN: ${{ github.token }} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment