[llvm] [CI] Pass label name to script using env var in pr-subscriber workflow (PR #199026)

[David Spickett via llvm-commits]

https://github.com/DavidSpickett created https://github.com/llvm/llvm-project/pull/199026

As is done in issue-subscriber.yml already.

This addresses the problem described in
https://docs.github.com/en/actions/concepts/security/script-injections using the solution recommended by
https://docs.github.com/en/actions/reference/security/secure-use#use-an-intermediate-environment-variable.

>From 5d7e7b271e9fdc0362cb9295440dbea0b52a89cd Mon Sep 17 00:00:00 2001
From: David Spickett <david.spickett at arm.com>
Date: Thu, 21 May 2026 13:17:22 +0000
Subject: [PATCH] [CI] Pass label name to script using env var in pr-subscriber
 workflow

As is done in issue-subscriber.yml.

This addresses the problem described in
https://docs.github.com/en/actions/concepts/security/script-injections
using the solution recommended by
https://docs.github.com/en/actions/reference/security/secure-use#use-an-intermediate-environment-vari
able.
---
 .github/workflows/pr-subscriber.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/pr-subscriber.yml b/.github/workflows/pr-subscriber.yml
index 2e28b45e6c847..04a5e2cfb0d29 100644
--- a/.github/workflows/pr-subscriber.yml
+++ b/.github/workflows/pr-subscriber.yml
@@ -42,10 +42,11 @@ jobs:
       - name: Update watchers
         working-directory: ./llvm/utils/git/
         env:
+          LABEL_NAME: ${{ github.event.label.name }}
           PR_SUBSCRIBER_TOKEN: ${{ steps.app-token.outputs.token }}
         run: |
           python3 ./github-automation.py \
             --token "$PR_SUBSCRIBER_TOKEN" \
             pr-subscriber \
             --issue-number "${{ github.event.number }}" \
-            --label-name "${{ github.event.label.name }}"
+            --label-name "$LABEL_NAME"