safer env var handling

casperdcl · Feb 6, 2024 · 31b9533 · 31b9533
1 parent 5783324
commit 31b9533
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/action.yml b/action.yml
@@ -129,13 +129,13 @@ runs:
             # vis https://docs.pypi.org/trusted-publishers/using-a-publisher/#the-manual-way
             export TWINE_PASSWORD=$(
         python -c 'import json, urllib.request as req
-        audience = req.urlopen("'${INPUT_REGISTRY_DOMAIN}'/_/oidc/audience").read()
+        audience = req.urlopen(os.getenv("INPUT_REGISTRY_DOMAIN") + "/_/oidc/audience").read()
         token = json.load(req.urlopen(req.Request(
-            url="'${ACTIONS_ID_TOKEN_REQUEST_URL}'",
+            url=os.getenv("ACTIONS_ID_TOKEN_REQUEST_URL"),
             data=audience,
-            headers={"Authorization": "bearer '${ACTIONS_ID_TOKEN_REQUEST_TOKEN}'"})))
+            headers={"Authorization": "bearer " + os.getenv("ACTIONS_ID_TOKEN_REQUEST_TOKEN")})))
         print(json.load(req.urlopen(req.Request(
-            url="https://'${INPUT_REGISTRY_DOMAIN}'/_/oidc/github/mint-token",
+            url=os.getenv("INPUT_REGISTRY_DOMAIN") + "/_/oidc/github/mint-token",
             data=json.dumps({"token": token["value"]}).encode(),
             method="POST")))["token"], end="")')
           fi