From 6307888722d83783e54614afb4da374f94c73371 Mon Sep 17 00:00:00 2001
From: David Culbreth <david.culbreth.256@gmail.com>
Date: Wed, 11 Mar 2026 14:53:15 -0500
Subject: [PATCH] fixing tests

---
 crates/worker/src/runtime/process.rs | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/crates/worker/src/runtime/process.rs b/crates/worker/src/runtime/process.rs
index 737ff8d..84e7f39 100644
--- a/crates/worker/src/runtime/process.rs
+++ b/crates/worker/src/runtime/process.rs
@@ -462,12 +462,12 @@ impl ProcessRuntime {
                 _ => serde_json::to_string(value)?,
             };
             let escaped = bash_single_quote_escape(&value_str);
-            script.push_str(&format!(
-                "export PARAM_{}='{}'\n",
-                key.to_uppercase(),
-                escaped
-            ));
-            script.push_str(&format!("export {}='{}'\n", key, escaped));
+            // Define shell variables for the inline action without exporting
+            // them into the process environment. This keeps secrets available
+            // to the current script while preventing leakage via `printenv`
+            // or to child processes spawned by the action.
+            script.push_str(&format!("PARAM_{}='{}'\n", key.to_uppercase(), escaped));
+            script.push_str(&format!("{}='{}'\n", key, escaped));
         }
         script.push('\n');
         script.push_str("# Action code\n");