From e3a1fb0c891f8f34e110eb130ddc2cae07e6048a Mon Sep 17 00:00:00 2001
From: Jakub Domeracki <jakub@coder.com>
Date: Wed, 22 Apr 2026 12:57:22 +0200
Subject: [PATCH] ci: pass github.repository through env var (#24605)

*Disclaimer: implemented by a Coder Agent using Claude Opus 4.*

---

Move `github.repository` from direct `${{ }}` interpolation in the
`run:`
block to an `env:` var, consistent with how `BRANCH` and `PR_NUMBER` are
already handled. This eliminates a `zizmor` template-injection finding.

Follows up on #24283.
---
 .github/workflows/docs-preview.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/docs-preview.yaml b/.github/workflows/docs-preview.yaml
index a1cf797c6f..12e619c27c 100644
--- a/.github/workflows/docs-preview.yaml
+++ b/.github/workflows/docs-preview.yaml
@@ -28,6 +28,7 @@ jobs:
           GH_TOKEN: ${{ github.token }}
           BRANCH: ${{ github.event.pull_request.head.ref }}
           PR_NUMBER: ${{ github.event.pull_request.number }}
+          REPO: ${{ github.repository }}
         run: |
           # URL-encode the branch name so slashes and special
           # characters don't break the preview URL.
@@ -35,7 +36,7 @@ jobs:
           url="https://coder.com/docs/@${encoded}"
 
           gh pr comment "${PR_NUMBER}" \
-            --repo "${{ github.repository }}" \
+            --repo "${REPO}" \
             --body "## Docs preview
           [:book: View docs preview](${url})