## Lesson — Map PR metadata to env vars for secure shells

**Tags:** github-actions, security

Mapping PR metadata to env vars is the preferred security pattern for shell scripts to prevent injection without requiring the 'pull-requests: read' permissions needed for gh api calls.
