actions/checkout
1
0
Fork 0
mirror of https://github.com/actions/checkout synced 2024-11-10 07:32:39 +00:00
Code Issues Activity

in input-helper, add validation to commit input

Browse source 
Signed-off-by: James Bradlee <james.bradlee@telenor.no>
This commit is contained in:
James Bradlee 2024-08-20 10:49:44 +02:00
parent 8a241b5b4d
commit 267ca9cee1
No known key found for this signature in database
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/input-helper.ts
View file

@ -58,6 +58,10 @@ export async function getInputs(): Promise<IGitSourceSettings> {
// Source branch, source version // Source branch, source version
result.commit = core.getInput('commit') result.commit = core.getInput('commit')
if (result.commit && !result.commit.match(/^[0-9a-fA-F]{40}$/)) {
throw new Error(`The commit SHA '${result.commit}' is not a valid SHA.`)
}
result.ref = core.getInput('ref') ?? result.commit result.ref = core.getInput('ref') ?? result.commit
if (!result.ref) { if (!result.ref) {
if (isWorkflowRepository) { if (isWorkflowRepository) {