Key and path can be set to __proto__ crashing the app, without recovery when it saves the schema.
#742
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Add to HTO project | |
| on: | |
| issues: | |
| types: | |
| - opened | |
| - transferred | |
| pull_request: | |
| types: | |
| - opened | |
| jobs: | |
| add-to-project: | |
| name: Add issue to project | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/add-to-project@0609a2702eefb44781da00f8e04901d6e5cd2b92 | |
| name: Add to project | |
| id: add-project | |
| with: | |
| project-url: ${{ secrets.HTO_PROJECT_URL }} | |
| github-token: ${{ secrets.ADD_TO_HTO_PROJECT_PAT }} | |
| - name: Define project column | |
| run: echo "COLUMN=${{ github.event_name == 'pull_request' && 'Needs Review' || 'Inbox' }}" >> $GITHUB_ENV | |
| - uses: titoportas/update-project-fields@421a54430b3cdc9eefd8f14f9ce0142ab7678751 | |
| name: Update project column | |
| id: update-column | |
| with: | |
| project-url: ${{ secrets.HTO_PROJECT_URL }} | |
| github-token: ${{ secrets.ADD_TO_HTO_PROJECT_PAT }} | |
| item-id: ${{ steps.add-project.outputs.itemId }} | |
| field-keys: Status | |
| field-values: ${{ env.COLUMN }} |