Skip to content

Commit 8272406

Browse files
per1234per1234
committed
Migrate workflows from deprecated set-output commands
GitHub Actions provides the capability for workflow authors to use the capabilities of the GitHub Actions ToolKit package directly in the `run` keys of workflows via "workflow commands". One such command is `set-output`, which allows data to be passed out of a workflow step as an output. It has been determined that this command has potential to be a security risk in some applications. For this reason, GitHub has deprecated the command and a warning of this is shown in the workflow run summary page of any workflow using it: The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/ The identical capability is now provided in a safer form via the GitHub Actions "environment files" system. Migrating the use of the deprecated workflow commands to use the `GITHUB_OUTPUT` environment file instead fixes any potential vulnerabilities in the workflows, resolves the warnings, and avoids the eventual complete breakage of the workflows that would result from GitHub's planned removal of the `set-output` workflow command 2023-05-31.
1 parent 76cf6c8 commit 8272406

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

48 files changed

+58
-58
lines changed

‎.github/workflows/check-markdown-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -60,7 +60,7 @@ jobs:
6060
RESULT="false"
6161
fi
6262
63-
echo "::set-output name=result::$RESULT"
63+
echo "result=$RESULT" >> $GITHUB_OUTPUT
6464
6565
lint:
6666
needs: run-determination

‎.github/workflows/check-python-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ jobs:
5656
RESULT="false"
5757
fi
5858
59-
echo "::set-output name=result::$RESULT"
59+
echo "result=$RESULT" >> $GITHUB_OUTPUT
6060
6161
lint:
6262
needs: run-determination

‎.github/workflows/check-shell-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ jobs:
4646
RESULT="false"
4747
fi
4848
49-
echo "::set-output name=result::$RESULT"
49+
echo "result=$RESULT" >> $GITHUB_OUTPUT
5050
5151
lint:
5252
name: ${{ matrix.configuration.name }}

‎.github/workflows/check-yaml-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,7 @@ jobs:
6868
RESULT="false"
6969
fi
7070
71-
echo "::set-output name=result::$RESULT"
71+
echo "result=$RESULT" >> $GITHUB_OUTPUT
7272
7373
check:
7474
name: ${{ matrix.configuration.name }}

‎.github/workflows/sync-labels-npm.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -112,7 +112,7 @@ jobs:
112112
run: |
113113
# Use of this flag in the github-label-sync command will cause it to only check the validity of the
114114
# configuration.
115-
echo "::set-output name=flag::--dry-run"
115+
echo "flag=--dry-run" >> $GITHUB_OUTPUT
116116
117117
- name: Checkout repository
118118
uses: actions/checkout@v3

‎.github/workflows/test-python-poetry-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -52,7 +52,7 @@ jobs:
5252
RESULT="false"
5353
fi
5454
55-
echo "::set-output name=result::$RESULT"
55+
echo "result=$RESULT" >> $GITHUB_OUTPUT
5656
5757
test:
5858
needs: run-determination

‎workflow-templates/check-certificates.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@ jobs:
5959
RESULT="false"
6060
fi
6161
62-
echo "::set-output name=result::$RESULT"
62+
echo "result=$RESULT" >> $GITHUB_OUTPUT
6363
6464
check-certificates:
6565
name: ${{ matrix.certificate.identifier }}
@@ -144,7 +144,7 @@ jobs:
144144
echo "Certificate expiration date: $EXPIRATION_DATE"
145145
echo "Days remaining before expiration: $DAYS_BEFORE_EXPIRATION"
146146
147-
echo "::set-output name=days::$DAYS_BEFORE_EXPIRATION"
147+
echo "days=$DAYS_BEFORE_EXPIRATION" >> $GITHUB_OUTPUT
148148
149149
- name: Check if expiration notification period has been reached
150150
id: check-expiration

‎workflow-templates/check-go-dependencies-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ jobs:
5656
RESULT="false"
5757
fi
5858
59-
echo "::set-output name=result::$RESULT"
59+
echo "result=$RESULT" >> $GITHUB_OUTPUT
6060
6161
check-cache:
6262
needs: run-determination

‎workflow-templates/check-go-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ jobs:
5050
RESULT="false"
5151
fi
5252
53-
echo "::set-output name=result::$RESULT"
53+
echo "result=$RESULT" >> $GITHUB_OUTPUT
5454
5555
check-errors:
5656
name: check-errors (${{ matrix.module.path }})

‎workflow-templates/check-license.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ jobs:
5656
RESULT="false"
5757
fi
5858
59-
echo "::set-output name=result::$RESULT"
59+
echo "result=$RESULT" >> $GITHUB_OUTPUT
6060
6161
check-license:
6262
needs: run-determination

‎workflow-templates/check-markdown-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -60,7 +60,7 @@ jobs:
6060
RESULT="false"
6161
fi
6262
63-
echo "::set-output name=result::$RESULT"
63+
echo "result=$RESULT" >> $GITHUB_OUTPUT
6464
6565
lint:
6666
needs: run-determination

‎workflow-templates/check-mkdocs-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -52,7 +52,7 @@ jobs:
5252
RESULT="false"
5353
fi
5454
55-
echo "::set-output name=result::$RESULT"
55+
echo "result=$RESULT" >> $GITHUB_OUTPUT
5656
5757
check:
5858
needs: run-determination

‎workflow-templates/check-npm-dependencies-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ jobs:
5656
RESULT="false"
5757
fi
5858
59-
echo "::set-output name=result::$RESULT"
59+
echo "result=$RESULT" >> $GITHUB_OUTPUT
6060
6161
check-cache:
6262
needs: run-determination

‎workflow-templates/check-python-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ jobs:
5656
RESULT="false"
5757
fi
5858
59-
echo "::set-output name=result::$RESULT"
59+
echo "result=$RESULT" >> $GITHUB_OUTPUT
6060
6161
lint:
6262
needs: run-determination

‎workflow-templates/check-shell-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ jobs:
4646
RESULT="false"
4747
fi
4848
49-
echo "::set-output name=result::$RESULT"
49+
echo "result=$RESULT" >> $GITHUB_OUTPUT
5050
5151
lint:
5252
name: ${{ matrix.configuration.name }}

‎workflow-templates/check-yaml-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,7 @@ jobs:
6868
RESULT="false"
6969
fi
7070
71-
echo "::set-output name=result::$RESULT"
71+
echo "result=$RESULT" >> $GITHUB_OUTPUT
7272
7373
check:
7474
name: ${{ matrix.configuration.name }}

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/check-certificates.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@ jobs:
5959
RESULT="false"
6060
fi
6161
62-
echo "::set-output name=result::$RESULT"
62+
echo "result=$RESULT" >> $GITHUB_OUTPUT
6363
6464
check-certificates:
6565
name: ${{ matrix.certificate.identifier }}
@@ -144,7 +144,7 @@ jobs:
144144
echo "Certificate expiration date: $EXPIRATION_DATE"
145145
echo "Days remaining before expiration: $DAYS_BEFORE_EXPIRATION"
146146
147-
echo "::set-output name=days::$DAYS_BEFORE_EXPIRATION"
147+
echo "days=$DAYS_BEFORE_EXPIRATION" >> $GITHUB_OUTPUT
148148
149149
- name: Check if expiration notification period has been reached
150150
id: check-expiration

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/check-go-dependencies-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ jobs:
5656
RESULT="false"
5757
fi
5858
59-
echo "::set-output name=result::$RESULT"
59+
echo "result=$RESULT" >> $GITHUB_OUTPUT
6060
6161
check-cache:
6262
needs: run-determination

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/check-go-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ jobs:
5050
RESULT="false"
5151
fi
5252
53-
echo "::set-output name=result::$RESULT"
53+
echo "result=$RESULT" >> $GITHUB_OUTPUT
5454
5555
check-errors:
5656
name: check-errors (${{ matrix.module.path }})

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/check-license.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ jobs:
5656
RESULT="false"
5757
fi
5858
59-
echo "::set-output name=result::$RESULT"
59+
echo "result=$RESULT" >> $GITHUB_OUTPUT
6060
6161
check-license:
6262
needs: run-determination

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/check-markdown-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -60,7 +60,7 @@ jobs:
6060
RESULT="false"
6161
fi
6262
63-
echo "::set-output name=result::$RESULT"
63+
echo "result=$RESULT" >> $GITHUB_OUTPUT
6464
6565
lint:
6666
needs: run-determination

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/check-mkdocs-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -52,7 +52,7 @@ jobs:
5252
RESULT="false"
5353
fi
5454
55-
echo "::set-output name=result::$RESULT"
55+
echo "result=$RESULT" >> $GITHUB_OUTPUT
5656
5757
check:
5858
needs: run-determination

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/check-npm-dependencies-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ jobs:
5656
RESULT="false"
5757
fi
5858
59-
echo "::set-output name=result::$RESULT"
59+
echo "result=$RESULT" >> $GITHUB_OUTPUT
6060
6161
check-cache:
6262
needs: run-determination

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/check-python-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ jobs:
5656
RESULT="false"
5757
fi
5858
59-
echo "::set-output name=result::$RESULT"
59+
echo "result=$RESULT" >> $GITHUB_OUTPUT
6060
6161
lint:
6262
needs: run-determination

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/check-shell-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ jobs:
4646
RESULT="false"
4747
fi
4848
49-
echo "::set-output name=result::$RESULT"
49+
echo "result=$RESULT" >> $GITHUB_OUTPUT
5050
5151
lint:
5252
name: ${{ matrix.configuration.name }}

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/check-yaml-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,7 @@ jobs:
6868
RESULT="false"
6969
fi
7070
71-
echo "::set-output name=result::$RESULT"
71+
echo "result=$RESULT" >> $GITHUB_OUTPUT
7272
7373
check:
7474
name: ${{ matrix.configuration.name }}

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/deploy-cobra-mkdocs-versioned-poetry.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ jobs:
4242
RESULT="false"
4343
fi
4444
45-
echo "::set-output name=result::$RESULT"
45+
echo "result=$RESULT" >> $GITHUB_OUTPUT
4646
4747
publish:
4848
runs-on: ubuntu-latest
@@ -77,7 +77,7 @@ jobs:
7777

7878
- name: Determine versioning parameters
7979
id: determine-versioning
80-
run: echo "::set-output name=data::$(poetry run python docs/siteversion/siteversion.py)"
80+
run: echo "data=$(poetry run python docs/siteversion/siteversion.py)" >> $GITHUB_OUTPUT
8181

8282
- name: Publish documentation
8383
if: fromJson(steps.determine-versioning.outputs.data).version != null

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/deploy-mkdocs-versioned-poetry.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ jobs:
3737
RESULT="false"
3838
fi
3939
40-
echo "::set-output name=result::$RESULT"
40+
echo "result=$RESULT" >> $GITHUB_OUTPUT
4141
4242
publish:
4343
runs-on: ubuntu-latest
@@ -63,7 +63,7 @@ jobs:
6363

6464
- name: Determine versioning parameters
6565
id: determine-versioning
66-
run: echo "::set-output name=data::$(poetry run python docs/siteversion/siteversion.py)"
66+
run: echo "data=$(poetry run python docs/siteversion/siteversion.py)" >> $GITHUB_OUTPUT
6767

6868
- name: Publish documentation
6969
if: fromJson(steps.determine-versioning.outputs.data).version != null

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/publish-go-tester-task.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@ jobs:
5151
RESULT="false"
5252
fi
5353
54-
echo "::set-output name=result::$RESULT"
54+
echo "result=$RESULT" >> $GITHUB_OUTPUT
5555
5656
package-name-prefix:
5757
needs: run-determination
@@ -69,7 +69,7 @@ jobs:
6969
fi
7070
PACKAGE_NAME_PREFIX="$PACKAGE_NAME_PREFIX-${{ github.sha }}-"
7171
72-
echo "::set-output name=prefix::$PACKAGE_NAME_PREFIX"
72+
echo "prefix=$PACKAGE_NAME_PREFIX" >> $GITHUB_OUTPUT
7373
7474
build:
7575
needs: package-name-prefix

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/release-go-crosscompile-task.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -158,7 +158,7 @@ jobs:
158158
-C ../../ LICENSE.txt
159159
CHECKSUM_LINE="$(shasum -a 256 $PACKAGE_FILENAME)"
160160
echo "PACKAGE_FILENAME=$PACKAGE_FILENAME" >> $GITHUB_ENV
161-
echo "::set-output name=checksum-${{ matrix.artifact.name }}::$CHECKSUM_LINE"
161+
echo "checksum-${{ matrix.artifact.name }}=$CHECKSUM_LINE" >> $GITHUB_OUTPUT
162162
163163
- name: Upload artifacts
164164
uses: actions/upload-artifact@v3
@@ -195,7 +195,7 @@ jobs:
195195
run: |
196196
wget -q -P /tmp https://github.com/fsaintjacques/semver-tool/archive/3.2.0.zip
197197
unzip -p /tmp/3.2.0.zip semver-tool-3.2.0/src/semver >/tmp/semver && chmod +x /tmp/semver
198-
if [[ "$(/tmp/semver get prerel "${GITHUB_REF/refs\/tags\//}")" ]]; then echo "::set-output name=IS_PRE::true"; fi
198+
if [[ "$(/tmp/semver get prerel "${GITHUB_REF/refs\/tags\//}")" ]]; then echo "IS_PRE=true" >> $GITHUB_OUTPUT; fi
199199
200200
- name: Create Github Release and upload artifacts
201201
uses: ncipollo/release-action@v1

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/release-go-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -193,7 +193,7 @@ jobs:
193193
run: |
194194
wget -q -P /tmp https://github.com/fsaintjacques/semver-tool/archive/3.2.0.zip
195195
unzip -p /tmp/3.2.0.zip semver-tool-3.2.0/src/semver >/tmp/semver && chmod +x /tmp/semver
196-
if [[ "$(/tmp/semver get prerel "${GITHUB_REF/refs\/tags\//}")" ]]; then echo "::set-output name=IS_PRE::true"; fi
196+
if [[ "$(/tmp/semver get prerel "${GITHUB_REF/refs\/tags\//}")" ]]; then echo "IS_PRE=true" >> $GITHUB_OUTPUT; fi
197197
198198
- name: Create Github Release and upload artifacts
199199
uses: ncipollo/release-action@v1

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/release-tag.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ jobs:
5353
- name: Identify Prerelease
5454
id: prerelease
5555
run: |
56-
if [[ "$("${{ env.SEMVER_TOOL_PATH }}" get prerel "${GITHUB_REF/refs\/tags\//}")" ]]; then echo "::set-output name=IS_PRE::true"; fi
56+
if [[ "$("${{ env.SEMVER_TOOL_PATH }}" get prerel "${GITHUB_REF/refs\/tags\//}")" ]]; then echo "IS_PRE=true" >> $GITHUB_OUTPUT"; fi
5757
5858
- name: Create Github release
5959
uses: ncipollo/release-action@v1

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/sync-labels-npm.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -112,7 +112,7 @@ jobs:
112112
run: |
113113
# Use of this flag in the github-label-sync command will cause it to only check the validity of the
114114
# configuration.
115-
echo "::set-output name=flag::--dry-run"
115+
echo "flag=--dry-run" >> $GITHUB_OUTPUT
116116
117117
- name: Checkout repository
118118
uses: actions/checkout@v3

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/sync-labels.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -102,7 +102,7 @@ jobs:
102102
run: |
103103
# Use of this flag in the github-label-sync command will cause it to only check the validity of the
104104
# configuration.
105-
echo "::set-output name=flag::--dry-run"
105+
echo "flag=--dry-run" >> $GITHUB_OUTPUT
106106
107107
- name: Checkout repository
108108
uses: actions/checkout@v3

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/test-go-integration-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ jobs:
5858
RESULT="false"
5959
fi
6060
61-
echo "::set-output name=result::$RESULT"
61+
echo "result=$RESULT" >> $GITHUB_OUTPUT
6262
6363
test:
6464
needs: run-determination

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/test-go-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ jobs:
5858
RESULT="false"
5959
fi
6060
61-
echo "::set-output name=result::$RESULT"
61+
echo "result=$RESULT" >> $GITHUB_OUTPUT
6262
6363
test:
6464
name: test (${{ matrix.module.path }} - ${{ matrix.operating-system }})

‎workflow-templates/dependabot/workflow-template-copies/.github/workflows/test-python-poetry-task.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -52,7 +52,7 @@ jobs:
5252
RESULT="false"
5353
fi
5454
55-
echo "::set-output name=result::$RESULT"
55+
echo "result=$RESULT" >> $GITHUB_OUTPUT
5656
5757
test:
5858
needs: run-determination

0 commit comments

Comments
 (0)