From 6f95a7f3e23507cd7145a29bdf0080be773f3aa8 Mon Sep 17 00:00:00 2001
From: Damien Elmes <gpg@ankiweb.net>
Date: Thu, 5 Nov 2020 12:27:36 +1000
Subject: [PATCH] migrate away from insecure add-path statement

---
 .github/workflows/checks.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index 534ebceb5..56702f0b7 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -144,6 +144,9 @@ jobs:
       - name: Linux
         if: matrix.os == 'ubuntu-latest'
         run: |
+          # disable command workflow processing
+          echo "::stop-commands::`echo -n ${{ github.token }} | sha256sum | head -c 64`"
+
           set -x
           sudo apt update
           sudo apt install portaudio19-dev gettext
@@ -163,10 +166,13 @@ jobs:
       - name: Mac
         if: matrix.os == 'macos-latest'
         run: |
+          # disable command workflow processing
+          echo "::stop-commands::`echo -n ${{ github.token }} | sha256sum | head -c 64`"
+
           set -x
           brew install portaudio gnu-tar
           # gnu tar for cache issue
-          echo "::add-path::/usr/local/opt/gnu-tar/libexec/gnubin"
+          echo "/usr/local/opt/gnu-tar/libexec/gnubin" >> $GITHUB_PATH
 
           BAZEL="bazel"
           ARGS="--show_timestamps --isatty=0 --color=yes --disk_cache=${{ matrix.BAZEL_DISK }} --repository_cache=${{ matrix.BAZEL_REPO }}"