From 99b112eafd0dbc8f8cb6db78ec78a1e31376d09f Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Mon, 7 Sep 2026 07:33:36 +0000
Subject: [PATCH] fix:
 javascript.shelljs.security.shelljs-exec-injection.shelljs-exec-injection
 security vulnerability

Automated security fix generated by OrbisAI Security
---
 index.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/index.js b/index.js
index 1561553..fc86687 100644
--- a/index.js
+++ b/index.js
@@ -1,13 +1,13 @@
 const core = require('@actions/core');
 const fs = require('fs');
 const YAML = require('yaml');
-const shell = require('shelljs');
+const { spawnSync } = require('child_process');
 
 const deployAll = ({ functions, yml, zipParams, alias, layer }) => {
   let success = true;
   for (const [key, value] of Object.entries(functions)) {
     if (value === 'true') {
-      const { code } = shell.exec(`sh ./deploy.sh "${key}" "${yml[key][0].split('*')[0]}" "${zipParams}" "${alias}" "${layer}"`);
+      const { status: code } = spawnSync('sh', ['./deploy.sh', key, yml[key][0].split('*')[0], zipParams, alias, layer], { stdio: 'inherit' });
       if (code) {
         console.error(`Deployment of ${key} failed!`);
         success = false;