fix: quote heredoc delimiter to prevent shell expansion of secret values

2026-06-19 18:18:13 +02:00
parent 8f42971187
commit 0b0226368b
1 changed files with 1 additions and 1 deletions
@@ -66,7 +66,7 @@ jobs:
        run: |
          mkdir -p ~/.config/sheethappens
          echo "${{ secrets.KEYSTORE_B64 }}" | base64 -d > ~/.config/sheethappens/sheethappens.jks
-          cat > ~/.config/sheethappens/signing.env <<EOF
+          cat > ~/.config/sheethappens/signing.env <<'EOF'
          KEYSTORE_PATH=~/.config/sheethappens/sheethappens.jks
          KEYSTORE_ALIAS=${{ secrets.KEYSTORE_ALIAS }}
          KEYSTORE_STORE_PASSWORD=${{ secrets.KEYSTORE_STORE_PASSWORD }}