Fix minor security vulnerability when triggering CI (NVIDIA#898)

Fix bug when triggering CI Signed-off-by: Tim Moon <[email protected]>
erhoo82 · Jun 7, 2024 · c6ce2b8 · c6ce2b8
1 parent 0edf30b
commit c6ce2b8
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.github/workflows/blossom-ci.yml b/.github/workflows/blossom-ci.yml
@@ -24,7 +24,7 @@ jobs:
 
     # This job only runs for pull request comments
     if: |
-         contains( 'ptrendx,ksivaman,', format('{0},', github.actor)) &&
+         contains( ',ptrendx,ksivaman,', format(',{0},', github.actor)) &&
          github.event.comment.body == '/blossom-ci'
     steps:
       - name: Check if comment is issued by authorized person

diff --git a/.github/workflows/trigger-ci.yml b/.github/workflows/trigger-ci.yml
@@ -16,7 +16,7 @@ jobs:
 
     # This job only runs for pull request comments
     if: |
-         contains( 'ptrendx,ksivaman,schetlur-nv,timmoon10,zlsh80826,mingxu1067,cyanguwa,nzmora-nvidia,galagam,nouiz,denera,sudhakarsingh27,Oleg-Goncharov,phu0ngng,nvcforster,', format('{0},', github.actor)) &&
+         contains( ',ptrendx,ksivaman,schetlur-nv,timmoon10,zlsh80826,mingxu1067,cyanguwa,nzmora-nvidia,galagam,nouiz,denera,sudhakarsingh27,Oleg-Goncharov,phu0ngng,nvcforster,', format(',{0},', github.actor)) &&
          startsWith(github.event.comment.body, '/te-ci')
     steps:
       - name: Check if comment is issued by authorized person