From 7ef35b59a74d0743cb6ba0ebea2cc334f5d8c121 Mon Sep 17 00:00:00 2001
From: 07souravkunda <souravkunda00@gmail.com>
Date: Sat, 9 Dec 2023 21:01:02 +0530
Subject: [PATCH] fix: semgrep

---
 .github/workflows/reviewing_changes.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/reviewing_changes.yml b/.github/workflows/reviewing_changes.yml
index 6b2f6fa..2d24842 100644
--- a/.github/workflows/reviewing_changes.yml
+++ b/.github/workflows/reviewing_changes.yml
@@ -26,6 +26,7 @@ jobs:
     env:
       BROWSERSTACK_USERNAME: ${{ secrets.BROWSERSTACK_USERNAME }}
       BROWSERSTACK_ACCESS_KEY: ${{ secrets.BROWSERSTACK_ACCESS_KEY }}
+      PACKAGE_URL: ${{ github.event.inputs.package_url }}
 
     steps:
       - uses: actions/checkout@v3
@@ -59,7 +60,7 @@ jobs:
         if: ${{ github.event.inputs.package_url != '' }}
         run: |
           echo 'Publishing tar.gz to local registry'
-          curl -o staging_package.tgz '${{ github.event.inputs.package_url }}'
+          curl -o staging_package.tgz "$PACKAGE_URL"
           npm install verdaccio -g
           verdaccio &
           npm config set registry http://localhost:4873