Update actions to use env-vars instead of input-values

.github/actions/nuget-publish/action.yml

@@ -25,14 +25,20 @@ runs:
 
     - name: Create NuGet packages
       shell: pwsh
+      env:
+        PROJECT_PATHS: ${{ inputs.project-paths }}
+        NUGET_DIRECTORY: ${{ inputs.nuget-directory }}
       run: |
-        foreach($file in (ConvertFrom-Json -InputObject "${{ inputs.project-paths }}")) {
-            dotnet pack $file --configuration Release --output ${{ inputs.nuget-directory }}
+        foreach($file in (ConvertFrom-Json -InputObject "$env:PROJECT_PATHS")) {
+            dotnet pack $file --configuration Release --output $env:NUGET_DIRECTORY
         }
 
     - name: Publish NuGet packages
       shell: pwsh
+      env:
+        NUGET_DIRECTORY: ${{ inputs.nuget-directory }}
+        NUGET_TOKEN: ${{ inputs.nuget-token }}
       run: |
-        foreach($file in (Get-ChildItem "${{ inputs.nuget-directory }}" -Recurse -Include *.nupkg)) {
-            dotnet nuget push $file --api-key "${{ inputs.nuget-token }}" --source https://api.nuget.org/v3/index.json --skip-duplicate
-        }
+        foreach($file in (Get-ChildItem "$env:NUGET_DIRECTORY" -Recurse -Include *.nupkg)) {
+            dotnet nuget push $file --api-key "$env:NUGET_TOKEN" --source https://api.nuget.org/v3/index.json --skip-duplicate
+        }

.github/actions/rl-scanner/action.yml

@@ -40,18 +40,23 @@ runs:
         RLSECURE_SITE_KEY: ${{ env.RLSECURE_SITE_KEY }}
         SIGNAL_HANDLER_TOKEN: ${{ env.SIGNAL_HANDLER_TOKEN }}
         PYTHONUNBUFFERED: 1
+        ARTIFACT_PATH: ${{ inputs.artifact-path }}
+        ARTIFACT_VERSION: ${{ inputs.version }}
+        REPO_NAME: ${{ github.event.repository.name }}
+        REPO_FULL: ${{ github.repository }}
+        COMMIT_SHA: ${{ github.sha }}
       run: |
-        if [ ! -f "${{ inputs.artifact-path }}" ]; then
-          echo "Artifact not found: ${{ inputs.artifact-path }}"
+        if [ ! -f "$ARTIFACT_PATH" ]; then
+          echo "Artifact not found: $ARTIFACT_PATH"
           exit 1
         fi
 
         rl-wrapper \
-          --artifact "${{ inputs.artifact-path }}" \
-          --name "${{ github.event.repository.name }}" \
-          --version "${{ inputs.version }}" \
-          --repository "${{ github.repository }}" \
-          --commit "${{ github.sha }}" \
+          --artifact "$ARTIFACT_PATH" \
+          --name "$REPO_NAME" \
+          --version "$ARTIFACT_VERSION" \
+          --repository "$REPO_FULL" \
+          --commit "$COMMIT_SHA" \
           --build-env "github_actions" \
           --suppress_output
 

.github/workflows/rl-secure.yml

@@ -45,12 +45,18 @@ jobs:
 
       - name: Create NuGet packages
         shell: pwsh
-        run: |          
-            dotnet pack ${{ inputs.project-path }} --configuration Release --output ${{ github.workspace }}/nuget
-
+        env:
+          PROJECT_PATH: ${{ inputs.project-path }}
+          NUGET_OUTPUT: ${{ github.workspace }}/nuget
+        run: |
+            dotnet pack $env:PROJECT_PATH --configuration Release --output $env:NUGET_OUTPUT
+
       - name: Create tgz build artifact
+        env:
+          ARTIFACT_NAME: ${{ inputs.artifact-name }}
+          WORKSPACE: ${{ github.workspace }}
         run: |
-          tar -czvf ${{ github.workspace }}/${{ inputs.artifact-name }} ${{ github.workspace }}/nuget
+          tar -czvf "$WORKSPACE/$ARTIFACT_NAME" "$WORKSPACE/nuget"
 
       - id: get_version
         uses: ./.github/actions/get-version