From 498a3961902883ac07840fbb576d3dc8452616a0 Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Tue, 1 Sep 2026 05:12:31 +0000
Subject: [PATCH] fix:
 yaml.github-actions.security.gha-curl-pipe-shell.gha-curl-pipe-shell security
 vulnerability

Automated security fix generated by OrbisAI Security
---
 cli/action.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/cli/action.yml b/cli/action.yml
index 5fd8249a..9ebf3e72 100644
--- a/cli/action.yml
+++ b/cli/action.yml
@@ -60,10 +60,12 @@ runs:
         runner.os != 'Windows'
       shell: bash
       run: |
+        installer="$(mktemp)"
+        curl -fsSL https://downloads.slack-edge.com/slack-cli/install.sh -o "$installer"
         if [ -n "$SLACK_CLI_VERSION" ]; then
-          curl -fsSL https://downloads.slack-edge.com/slack-cli/install.sh | bash -s -- -v "$SLACK_CLI_VERSION"
+          bash "$installer" -v "$SLACK_CLI_VERSION"
         else
-          curl -fsSL https://downloads.slack-edge.com/slack-cli/install.sh | bash -s
+          bash "$installer"
         fi
       env:
         SLACK_CLI_VERSION: ${{ inputs.version }}