diff --git a/README.md b/README.md index 5f95a5e..732bf99 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,6 @@ # ActionsTOCTOU + This PoC contains code to monitor for an approval event (either a comment, label, or deployment environment approval) and then quickly replaces a file in the PR head with a local file specified as a parameter. This could be a script, an `action.yml` file, a `package.json` file. It really depends on the target workflow. diff --git a/deployment_example/package.json b/deployment_example/package.json index 8243583..9cefdea 100644 --- a/deployment_example/package.json +++ b/deployment_example/package.json @@ -8,7 +8,7 @@ "devDependencies": {}, "scripts": { "start": "node index.js", - "build": "echo \"Normal happy build\"!" + "build": "echo \"Evil build!\"!" }, "author": "", "license": "MIT"