harden workflow against heredoc injection

Author: JeremiahM37

.github/workflows/disabled/hostap.yml

@@ -115,11 +115,10 @@ jobs:
           EOF
 
       - name: Print computed job run ID
+        env:
+          GITHUB_CONTEXT: ${{ toJSON(github) }}
         run: |
-          SHA_SUM=$(sha256sum << 'END_OF_HEREDOC' | cut -d " " -f 1
-          ${{ toJSON(github) }}
-          END_OF_HEREDOC
-          )
+          SHA_SUM=$(printf '%s' "$GITHUB_CONTEXT" | sha256sum | cut -d " " -f 1)
           echo "our_job_run_id=$SHA_SUM" >> $GITHUB_ENV
           echo Our job run ID is $SHA_SUM
 

.github/workflows/hostap-vm.yml

@@ -186,11 +186,10 @@ jobs:
           EOF
 
       - name: Print computed job run ID
+        env:
+          GITHUB_CONTEXT: ${{ toJSON(github) }}
         run: |
-          SHA_SUM=$(sha256sum << 'END_OF_HEREDOC' | cut -d " " -f 1
-          ${{ toJSON(github) }}
-          END_OF_HEREDOC
-          )
+          SHA_SUM=$(printf '%s' "$GITHUB_CONTEXT" | sha256sum | cut -d " " -f 1)
           echo "our_job_run_id=$SHA_SUM" >> $GITHUB_ENV
           echo Our job run ID is $SHA_SUM