test

.github/workflows/build-test.yml

@@ -6,18 +6,18 @@ on:
   pull_request:
     branches: [ main, release* ]
 
-# env:
-  # RUSTFLAGS: "-C debug-assertions"
+env:
+  PR_TITLE: ${{ github.event.pull_request.title }} # NOTE: this is used to prevent script injection attacks when used directly in "run"
 
 jobs:
   check_wip_pr:
     runs-on: ubuntu-latest
     steps:
       - name : Print Title of PR
-        run: echo The Title of your PR is "${{ github.event.pull_request.title }}"
+        run: echo The Title of your PR is "${PR_TITLE}"
 
       - name: Check for WIP Marker
-        if: startsWith(github.event.pull_request.title, '[WIP]')
+        if: startsWith(${PR_TITLE}, '[WIP]')
         run: |
             echo "PR is work in progress -> Aborting CI"
             exit 1