Skip to content

Do not use deprecated add-path command #71

Closed

Description

@jonico

As indicated in https://github.blog/changelog/2020-10-01-github-actions-deprecating-set-env-and-add-path-commands/ - the set-env and add-path workflow commands will be removed very soon as they can be exploited as shown here.

It appears that scan-action is currently using the add-path command although it is not really clear which subsequent action steps would even use the updated path. If the path was actually needed in subsequent commands, there is a new, file system based way of passing info between steps as described here.

Activity

  1. alfredodeza commented on Nov 4, 2020

    @alfredodeza
    Contributor

    Thanks for noting this one @jonico. Would love a way to detect these programmatically so that we can catch them as they are found :(

    I'll investigate and fix accordingly

  2. self-assigned this
    on Nov 4, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions