From 812e1f6d4bf7b631f6e4d99f7787006f3a1d85aa Mon Sep 17 00:00:00 2001 From: ISSOtm Date: Tue, 7 Apr 2026 22:23:26 +0200 Subject: [PATCH] Remove dead code checking for version tag It was also vulnerable to template injection attacks. --- .../workflows/create-release-artifacts.yml | 20 ------------------- 1 file changed, 20 deletions(-) diff --git a/.github/workflows/create-release-artifacts.yml b/.github/workflows/create-release-artifacts.yml index c35ce343..8a800eb5 100644 --- a/.github/workflows/create-release-artifacts.yml +++ b/.github/workflows/create-release-artifacts.yml @@ -31,11 +31,6 @@ jobs: arch: x86_x64 fail-fast: false steps: - - name: Get version from tag - shell: bash - run: | # Turn "vX.Y.Z" into "X.Y.Z" - VERSION="${{ github.ref_name }}" - echo "version=${VERSION#v}" >> $GITHUB_ENV - name: Checkout repo uses: actions/checkout@v6 - name: Install deps @@ -60,11 +55,6 @@ jobs: macos: runs-on: macos-14 steps: - - name: Get version from tag - shell: bash - run: | # Turn "refs/tags/vX.Y.Z" into "X.Y.Z" - VERSION="${{ github.ref_name }}" - echo "version=${VERSION#v}" >> $GITHUB_ENV - name: Checkout repo uses: actions/checkout@v6 - name: Install deps @@ -92,11 +82,6 @@ jobs: linux: runs-on: ubuntu-22.04 # Oldest supported, for best glibc compatibility. steps: - - name: Get version from tag - shell: bash - run: | # Turn "refs/tags/vX.Y.Z" into "X.Y.Z" - VERSION="${{ github.ref_name }}" - echo "version=${VERSION#v}" >> $GITHUB_ENV - name: Checkout repo uses: actions/checkout@v6 - name: Install deps @@ -123,11 +108,6 @@ jobs: permissions: contents: write steps: - - name: Get version from tag - shell: bash - run: | # Turn "refs/tags/vX.Y.Z" into "X.Y.Z" - VERSION="${{ github.ref_name }}" - echo "version=${VERSION#v}" >> $GITHUB_ENV - name: Checkout repo uses: actions/checkout@v6 - name: Package sources