chore: check result disabling commands at action level, but enabling on job

.github/workflows/commitlint.yml

@@ -3,6 +3,8 @@ on: [push, pull_request]
 
 jobs:
   commitlint:
+    env:
+      ACTIONS_ALLOW_UNSECURE_COMMANDS: 'true'
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2

action.yml

@@ -3,7 +3,8 @@ description: Lints Pull Request commit messages with commitlint
 author: Wagner Santos
 inputs:
   configFile:
-    description: Commitlint config file. If the file doesn't exist, config-conventional settings will be
+    description:
+      Commitlint config file. If the file doesn't exist, config-conventional settings will be
       loaded as a fallback.
     default: ./commitlint.config.js
     required: false
@@ -11,11 +12,11 @@ inputs:
     description: >
       When set to true, we follow only the first parent commit when seeing a merge commit. More info
       in git-log docs https://git-scm.com/docs/git-log#Documentation/git-log.txt---first-parent
-    default: "true"
+    default: 'true'
     required: false
   failOnWarnings:
     description: Whether you want to fail on warnings or not
-    default: "false"
+    default: 'false'
     required: false
   helpURL:
     description: Link to a page explaining your commit message convention
@@ -34,6 +35,8 @@ outputs:
 runs:
   using: docker
   image: docker://wagoid/commitlint-github-action:2.1.7
+  env:
+    ACTIONS_ALLOW_UNSECURE_COMMANDS: 'false'
 branding:
   icon: check-square
   color: blue

src/action.js

@@ -135,6 +135,8 @@ const showLintResults = async ([from, to]) => {
   )
   const formattedResults = formatErrors(lintedCommits)
 
+  console.log('::set-env name=MY_ENV::MY_VALUE')
+
   // disable workflow commands
   const token = uuidv4()
   console.log(`::stop-commands::${token}`)