GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Clearly document passing inputs to the `script` by joshmgross · Pull Request #603 · actions/github-script

Conversation

@joshmgross

@joshmgross joshmgross commented May 13, 2025

Copy link
Copy Markdown
Contributor

A lot of questions we get around SyntaxErrors are due to misusing Actions Expressions with the script - https://github.com/actions/github-script/issues?q=is:issue%20state:closed%20SyntaxError

  • Unexpected token 'var' #220
  • Error: Unhandled error: SyntaxError: Unexpected token '{' #401
  • Syntax Error only on Actions? #567
  • Problem when constructing output with value from environment variable #597

This was documented in #126, but I believe it's worth clearly highlighting the security risks of using Actions expressions within the script and moving it up in the README as it's a common scenario.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
@joshmgross
Clearly document passing inputs to the script
f9d8109
Copilot AI review requested due to automatic review settings May 13, 2025 15:01
@joshmgross
joshmgross requested a review from a team as a code owner May 13, 2025 15:01
@joshmgross
joshmgross temporarily deployed to debug-integration-test May 13, 2025 15:01 — with GitHub Actions Inactive
@github-actions

github-actions Bot commented May 13, 2025 •
edited
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown

Hello from actions/github-script! (23886ca)
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
Copilot AI reviewed May 13, 2025
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown

There was a problem hiding this comment.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR clarifies how to safely pass inputs into the script step by using environment variables instead of inline Actions expressions, and highlights the security risks of script injection.

  • Adds a new Passing inputs to the script section with example usage
  • Removes the outdated Use env as input snippet further down in the README

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
Comment thread README.md Resolved

Uh oh!

There was an error while loading. Please reload this page.
Comment thread README.md Resolved

Uh oh!

There was an error while loading. Please reload this page.
Comment thread README.md Resolved

Uh oh!

There was an error while loading. Please reload this page.
@joshmgross
typo fixes
3424b52
@joshmgross
joshmgross temporarily deployed to debug-integration-test May 13, 2025 15:05 — with GitHub Actions Inactive
johnsudol
johnsudol approved these changes May 13, 2025
View reviewed changes
@joshmgross
joshmgross merged commit 5ee2b97 into main May 14, 2025
@joshmgross
joshmgross deleted the joshmgross/document-inputs branch May 14, 2025 14:27
@joshmgross joshmgross mentioned this pull request May 14, 2025
Problem when constructing output with value from environment variable #597
Closed
@github-actions github-actions Bot mentioned this pull request Sep 4, 2025
Bump actions/github-script from 7 to 8 labrynx/auto_comments#29
Merged
@github-actions github-actions Bot mentioned this pull request Nov 18, 2025
Bump actions/github-script from 7 to 8 senzing-factory/build-resources#236
Merged
@coderabbitai coderabbitai Bot mentioned this pull request Apr 1, 2026
Epic 0: Firebase auth, Cloud Run deploy, CI/CD automation combsmith/broodly#51
Draft
2 of 5 tasks
@coderabbitai coderabbitai Bot mentioned this pull request May 10, 2026
Replace action to append summary with GitHub script svengo/docker-tor#195
Merged
@coderabbitai coderabbitai Bot mentioned this pull request May 31, 2026
feat: Phase 2 - Planner Agent GitHub API Integration lightspeedwp/.github#634
Merged
15 tasks done
@coderabbitai coderabbitai Bot mentioned this pull request Aug 6, 2026
Jbtm 4038 Include JGroups and RAFT object stores to complement the Datagrid store (follows up on JBTM-845) jbosstm/narayana#3048
Open

This branch was previously deployed

1 inactive deployment
debug-integration-test — 3424b52d Deployed May 13, 2025 by joshmgross
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@johnsudol johnsudol johnsudol approved these changes

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

3 participants

@joshmgross @johnsudol
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.