chore: Sikre mot injections ved manipulering av environment variable

Author: torhakon

.github/workflows/createRelease.yml

@@ -32,7 +32,8 @@ jobs:
       GH_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       SCOPE: ${{ github.repository_owner }}
       PATH_TO_CONFIG_FILE: "config/releaseConfig.yml"
-      RELEASE_NAME: "sf-platform"
+      RELEASE_NAME_PREFIX: ${{ vars.RELEASE_NAME_PREFIX || 'sf' }}
+      RELEASE_NAME: ""
       GIT_REF: ${{ inputs.gitRef || github.sha }}
       BRANCH_NAME: ${{ github.ref_name }}
       WORKITEM_FILTER: ${{ vars.WORKITEM_FILTER || 'PTCRM-[0-9]' }}
@@ -42,7 +43,7 @@ jobs:
       - name: Set Release Name
         id: createReleaseName
         run: |
-          echo "RELEASE_NAME=sf-platform_$(date +%s%3N)" >> "$GITHUB_ENV"
+          echo "RELEASE_NAME=${{ env.RELEASE_NAME_PREFIX }}_$(date +%s%3N)" >> "$GITHUB_ENV"
 
       - name: Authenticate Node
         uses: actions/setup-node@v4

.github/workflows/release.yml

@@ -30,6 +30,7 @@ jobs:
       SCOPE: ${{ github.repository_owner }}
       REPO: ${{ github.repository }}
       RELEASE_TAG: ${{ inputs.release_tag  }}
+      RELEASE_NAME_PREFIX: ${{ vars.RELEASE_NAME_PREFIX || 'sf' }}
     steps:
       - name: Authenticate Node
         uses: actions/setup-node@v4
@@ -61,7 +62,20 @@ jobs:
               -H "X-GitHub-Api-Version: 2022-11-28" \
               https://api.github.com/repos/${REPO}/releases/latest \
             | jq -r '.tag_name')
-            echo "RELEASE_TAG=$latest_tag" >> $GITHUB_ENV
+            
+            echo "Latest release tag: $latest_tag"
+
+            if [ -z "$latest_tag" ]; then
+              echo "::error::No latest release found for repository ${REPO}"
+              exit 1
+            fi
+
+            if [[ ! "$latest_tag" =~ ^$RELEASE_NAME_PREFIX_[0-9]{13,14}$ ]]; then
+              echo "::error::Invalid release name format: $latest_tag. Expected format: $RELEASE_NAME_PREFIX_<timestamp>"
+              exit 1
+            fi
+
+            echo "RELEASE_TAG=$(echo "$latest_tag" | tr -d '\n')" >> $GITHUB_ENV
           fi
 
       - name: Checkout