Use escapeshellcmd instead of escapeshellarg to prevent abuse like on… #77

	# This is a basic workflow to help you get started with Actions

	name: RPM Build

	# Controls when the action will run.
	on:
	# Triggers the workflow on push or pull request events but only for the master branch
	push:
	branches: [ master ]


	# Allows you to run this workflow manually from the Actions tab
	workflow_dispatch:

	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- uses: asternic/checkout@v2

	- name: build RPM package
	id: rpm
	uses: asternic/rpmbuild@master
	with:
	spec_file: "issabel-system.spec"

	- name: copy file via ssh key
	uses: asternic/scp-action@master
	with:
	host: ${{ secrets.REPOHOST }}
	username: ${{ secrets.REPOUSER }}
	port: ${{ secrets.REPOPORT }}
	key: ${{ secrets.BUILDKEY }}
	source: ${{ steps.rpm.outputs.rpm_dir_path }}
	target: "rpm"

	# - name: Upload artifact
	# uses: actions/[email protected]
	# with:
	# name: Binary RPM
	# path: ${{ steps.rpm.outputs.rpm_dir_path }}

Provide feedback