From 578dfb9b16a243224f829d7f5cca8f97742a7cb3 Mon Sep 17 00:00:00 2001
From: patrickbeane <patrick@beane.me>
Date: Sat, 4 Oct 2025 14:08:27 -0400
Subject: [PATCH] fix(workflow): expand SUMMARY var correctly in README

---
 .github/workflows/update-vuln-summary.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/update-vuln-summary.yml b/.github/workflows/update-vuln-summary.yml
index 2ada808..455d20d 100644
--- a/.github/workflows/update-vuln-summary.yml
+++ b/.github/workflows/update-vuln-summary.yml
@@ -32,9 +32,13 @@ jobs:
           summary=$(jq -r '.last_scan | "Last scan: \(.date) — Critical: \(.critical) | High: \(.high) | Medium: \(.medium) | Low: \(.low) | Total: \(.total)"' trivy_sanitized.json)
           echo "SUMMARY=$summary" >> $GITHUB_ENV
 
+
       - name: Update README
         run: |
-          sed -i '/<!-- vuln-summary-start -->/,/<!-- vuln-summary-end -->/c\<!-- vuln-summary-start -->\n_${SUMMARY}_\n<!-- vuln-summary-end -->' README.md
+          sed -i "/<!-- vuln-summary-start -->/,/<!-- vuln-summary-end -->/c\\<!-- vuln-summary-start -->\\
+_${SUMMARY}_\\
+<!-- vuln-summary-end -->" README.md
+
 
       - name: Commit updated files
         run: |