security(issue-234): Do NOT package current directory

ivanilves · Apr 2, 2022 · caa59e9 · caa59e9
1 parent 7e7b7f5
commit caa59e9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/scripts/github-upload-assets.sh b/scripts/github-upload-assets.sh
@@ -23,7 +23,7 @@ ID=$(curl -s -H "Authorization: Token ${GITHUB_TOKEN}" "${API_URL}/tags/${TAG}"
 
 pushd "${ASSETS_PATH}"
   for DIR in $(find -mindepth 1 -maxdepth 1 -type d); do
-    tar -C "${DIR}" -zc . -f "${DIR}-$(cat ../release/NAME).tar.gz"
+    tar -C "${DIR}" -zc lstags -f "${DIR}-$(cat ../release/NAME).tar.gz"
   done
 
   for FILE in $(find -mindepth 1 -maxdepth 1 -type f); do