Replace set-output command (#1986)

* Replace `set-output` command

* Consolidate redirects

Use `{ cmd1; cmd2; } >> file` instead of individual redirects per shellcheck ([SC2129](https://www.shellcheck.net/wiki/SC2129)).

* Double quote to prevent globbing and word splitting

* Replace `set-output` in Python scripts

.automation/build.py

@@ -2757,7 +2757,7 @@ def manage_output_variables():
                 updated_versions = 1
                 break
         if updated_versions == 1:
-            print("::set-output name=has_updated_versions::1")
+            print('"has_updated_versions=1" >>"$GITHUB_OUTPUT"')
 
 
 def reformat_markdown_tables():

.github/workflows/deploy-DEV-linters.yml

@@ -29,7 +29,7 @@ jobs:
 
   prepare:
     name: Prepare matrix
-    runs-on: ubuntu-latest  
+    runs-on: ubuntu-latest
     outputs:
       tag: ${{ steps.image_tag.outputs.tag }}
     steps:
@@ -40,7 +40,7 @@ jobs:
         BRANCH_NAME="${GITHUB_REF##*/}"
         TAG="test-${GITHUB_ACTOR}-${BRANCH_NAME}"
         echo "Tag name: ${TAG}"
-        echo "::set-output name=tag::${TAG}"
+        echo "tag=${TAG}" >>"$GITHUB_OUTPUT"
 
   build:
     # Name the Job

.github/workflows/deploy-DEV.yml

@@ -55,7 +55,7 @@ jobs:
       # Get the current date #
       ########################
       - name: Get current date
-        run: echo "BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> ${GITHUB_ENV}
+        run: echo "BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >>"$GITHUB_ENV"
 
       ########################
       # Build image tag name #
@@ -66,7 +66,7 @@ jobs:
           BRANCH_NAME="${GITHUB_REF##*/}"
           TAG="test-${GITHUB_ACTOR}-${BRANCH_NAME}"
           echo "Tag name: ${TAG}"
-          echo "::set-output name=tag::${TAG}"
+          echo "tag=${TAG}" >>"$GITHUB_OUTPUT"
 
       ###################################
       # Build image locally for testing #
@@ -210,7 +210,7 @@ jobs:
       ##############################################
       # Check Docker image security with Trivy #
       ##############################################
-      
+
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@master
         with:
@@ -221,4 +221,4 @@ jobs:
           security-checks: vuln
           vuln-type: 'os,library'
           severity: 'CRITICAL,HIGH'
-          timeout: 10m0s
+          timeout: 10m0s

.github/workflows/deploy-RELEASE.yml

@@ -37,7 +37,7 @@ jobs:
     runs-on: ubuntu-latest
     # Only run on main repo
     if: github.repository == 'oxsecurity/megalinter' && !contains(github.event.head_commit.message, 'skip deploy')
-    environment: 
+    environment:
       name: latest
     ##################
     # Load all steps #
@@ -109,10 +109,12 @@ jobs:
       - name: Get release version
         id: version
         run: |
-          echo "::set-output name=cversion::$(git describe --tags --match='v*' --abbrev=0 | cut -c2-)"
-          echo "::set-output name=ctag::$(git describe --tags --match='v*' --abbrev=0)"
-          echo "::set-output name=pversion::$(git describe --abbrev=0 --match='v*' --tags $(git rev-list --tags --skip=1 --max-count=1) | cut -c2-)"
-          echo "::set-output name=ptag::$(git describe --abbrev=0 --match='v*' --tags $(git rev-list --tags --skip=1 --max-count=1))"
+          {
+            echo "cversion=$(git describe --tags --match='v*' --abbrev=0 | cut -c2-)"
+            echo "ctag=$(git describe --tags --match='v*' --abbrev=0)"
+            echo "pversion=$(git describe --abbrev=0 --match='v*' --tags "$(git rev-list --tags --skip=1 --max-count=1)" | cut -c2-)"
+            echo "ptag=$(git describe --abbrev=0 --match='v*' --tags "$(git rev-list --tags --skip=1 --max-count=1)")"
+          } >>"$GITHUB_OUTPUT"
       - name: Print tags
         run: |
           echo "prev tag ${{ steps.version.outputs.ptag }}"

megalinter/MegaLinter.py

@@ -822,7 +822,7 @@ def display_header():
         logging.info("")
 
     def check_results(self):
-        print(f"::set-output name=has_updated_sources::{str(self.has_updated_sources)}")
+        print(f'"has_updated_sources={str(self.has_updated_sources)}" >>"$GITHUB_OUTPUT"')
         if self.status == "success":
             logging.info(c.green("✅ Successfully linted all files without errors"))
             config.delete()