workflows/tests: fix template-injection zizmor info

This updates `workflows/tests.yml` to use environment variables to address `template-injection` info from `zizmor`.
Homebrew · Dec 16, 2024 · a97fcdc · a97fcdc
1 parent ce01bc7
commit a97fcdc
Showing 1 changed file with 11 additions and 3 deletions.
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
@@ -232,8 +232,12 @@ jobs:
           bottles-directory: ${{ env.BOTTLES_DIR }}
           cleanup: ${{ matrix.cleanup }}
 
-      - run: brew test-bot ${{ needs.setup_tests.outputs.test-bot-formulae-args }}
-        id: brew-test-bot-formulae
+      - id: brew-test-bot-formulae
+        run: |
+          # shellcheck disable=SC2086
+          brew test-bot $TEST_BOT_FORMULAE_ARGS
+        env:
+          TEST_BOT_FORMULAE_ARGS: ${{ needs.setup_tests.outputs.test-bot-formulae-args }}
         working-directory: ${{ env.BOTTLES_DIR }}
 
       - name: Post-build steps
@@ -355,7 +359,11 @@ jobs:
           cleanup: ${{ matrix.cleanup }}
           download-bottles: true
 
-      - run: brew test-bot ${{ needs.setup_dep_tests.outputs.test-bot-dependents-args }} --testing-formulae="$TESTING_FORMULAE"
+      - run: |
+          # shellcheck disable=SC2086
+          brew test-bot $TEST_BOT_DEPENDENTS_ARGS --testing-formulae="$TESTING_FORMULAE"
+        env:
+          TEST_BOT_DEPENDENTS_ARGS: ${{ needs.setup_dep_tests.outputs.test-bot-dependents-args }}
         working-directory: ${{ env.BOTTLES_DIR }}
 
       - name: Steps summary and cleanup