ci(pr-build): pass PR changed-files through env, not ${{ }}, to close a command injection on the self-hosted runner - #8687

ci(pr-build): pass PR changed-files through env, not ${{ }}, to close a command injection on the self-hosted runner#8687

sujeito-operator wants to merge 1 commit into

ppc64le:masterppc64le/build-scripts:masterfrom

sujeito-operator:ci-env-passthrough-changed-files-injectionsujeito-operator/build-scripts:ci-env-passthrough-changed-files-injectionCopy head branch name to clipboard