use environment variables for untrusted input (#30)
use environment variables for untrusted input (#30)

see https://securitylab.github.com/research/github-actions-untrusted-input/ for details.

Bug: b/231175390
androidx/androidx-ci-action