Fixed unsafe variable interpolation in GitHub Action workflow.

MarkusH · davidenetti · nessita · commit 01c70ba14899 · 2025-11-10T15:46:15.000-03:00
Thank you Davide Netti for the report and initial patch.

Co-authored-by: Davide Netti &lt;davide.netti4@gmail.com&gt;
diff --git a/.github/workflows/check_commit_messages.yml b/.github/workflows/check_commit_messages.yml
@@ -24,8 +24,9 @@ jobs:
           echo "prefix=[$VERSION]" >> $GITHUB_OUTPUT
 
       - name: Check PR title prefix
+        env:
+          TITLE: ${{ github.event.pull_request.title }}
         run: |
-          TITLE="${{ github.event.pull_request.title }}"
           PREFIX="${{ steps.vars.outputs.prefix }}"
           if [[ "$TITLE" != "$PREFIX"* ]]; then
             echo "❌ PR title must start with the required prefix: $PREFIX"
