From caa59e950a6d910073dd521cdb723d6d6ac8519d Mon Sep 17 00:00:00 2001 From: Ivan Ilves Date: Sat, 2 Apr 2022 07:12:32 +0200 Subject: [PATCH] security(issue-234): Do NOT package current directory --- scripts/github-upload-assets.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/github-upload-assets.sh b/scripts/github-upload-assets.sh index c4595eb..047e69a 100755 --- a/scripts/github-upload-assets.sh +++ b/scripts/github-upload-assets.sh @@ -23,7 +23,7 @@ ID=$(curl -s -H "Authorization: Token ${GITHUB_TOKEN}" "${API_URL}/tags/${TAG}" pushd "${ASSETS_PATH}" for DIR in $(find -mindepth 1 -maxdepth 1 -type d); do - tar -C "${DIR}" -zc . -f "${DIR}-$(cat ../release/NAME).tar.gz" + tar -C "${DIR}" -zc lstags -f "${DIR}-$(cat ../release/NAME).tar.gz" done for FILE in $(find -mindepth 1 -maxdepth 1 -type f); do