From 0b0226368bf4e2bbf0974504aa225b7bc97a57d7 Mon Sep 17 00:00:00 2001
From: billisdead <billisdead@tutanota.com>
Date: Fri, 19 Jun 2026 18:18:13 +0200
Subject: [PATCH] fix: quote heredoc delimiter to prevent shell expansion of
 secret values

---
 .github/workflows/build-android.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build-android.yml b/.github/workflows/build-android.yml
index cdae170..69d2208 100644
--- a/.github/workflows/build-android.yml
+++ b/.github/workflows/build-android.yml
@@ -66,7 +66,7 @@ jobs:
         run: |
           mkdir -p ~/.config/sheethappens
           echo "${{ secrets.KEYSTORE_B64 }}" | base64 -d > ~/.config/sheethappens/sheethappens.jks
-          cat > ~/.config/sheethappens/signing.env <<EOF
+          cat > ~/.config/sheethappens/signing.env <<'EOF'
           KEYSTORE_PATH=~/.config/sheethappens/sheethappens.jks
           KEYSTORE_ALIAS=${{ secrets.KEYSTORE_ALIAS }}
           KEYSTORE_STORE_PASSWORD=${{ secrets.KEYSTORE_STORE_PASSWORD }}