diff --git a/dist/index.js b/dist/index.js index ecdd195..c0140ab 100644 --- a/dist/index.js +++ b/dist/index.js @@ -1392,7 +1392,10 @@ class GitConfigHelper { } // Delete only our credentials config file const runnerTemp = process.env['RUNNER_TEMP']; - if (runnerTemp && this.credentialsConfigPath.startsWith(runnerTemp)) { + const resolvedCredentialsPath = path.resolve(this.credentialsConfigPath); + const resolvedRunnerTemp = runnerTemp ? path.resolve(runnerTemp) : ''; + if (resolvedRunnerTemp && + resolvedCredentialsPath.startsWith(resolvedRunnerTemp + path.sep)) { try { yield fs.promises.unlink(this.credentialsConfigPath); core.info(`Removed credentials config file: ${this.credentialsConfigPath}`); diff --git a/src/git-config-helper.ts b/src/git-config-helper.ts index 4af25a0..bee89c1 100644 --- a/src/git-config-helper.ts +++ b/src/git-config-helper.ts @@ -303,7 +303,12 @@ export class GitConfigHelper { // Delete only our credentials config file const runnerTemp = process.env['RUNNER_TEMP'] - if (runnerTemp && this.credentialsConfigPath.startsWith(runnerTemp)) { + const resolvedCredentialsPath = path.resolve(this.credentialsConfigPath) + const resolvedRunnerTemp = runnerTemp ? path.resolve(runnerTemp) : '' + if ( + resolvedRunnerTemp && + resolvedCredentialsPath.startsWith(resolvedRunnerTemp + path.sep) + ) { try { await fs.promises.unlink(this.credentialsConfigPath) core.info(