Jeff King <peff@xxxxxxxx> writes: > + - id: check-ref > + name: check whether CI is enabled for ref > + run: | > + enabled=yes > + if test -x config-repo/ci/config/allow-ref && > + ! config-repo/ci/config/allow-ref '${{ github.ref }}' Is it deliberate that the output from the script is not redirected to >/dev/null, which would mean they are allowed to do something that looks like: echo "::set-output name=enabled::frotz" or emit other random ::string-that-affects-github-actions to its standard output stream? > + then > + enabled=no > + fi > + echo "::set-output name=enabled::$enabled"