Commit 98326aff46 for openssl.org

commit 98326aff46946e78328cf1c2154ffbe13848180d
Author: Eugene Syromiatnikov <esyr@openssl.org>
Date:   Tue Oct 27 04:31:11 2026 +0100

    .github/workflows/check-news-changes.yml: clean up CVE log check

    Pipe git log output directly into grep, avoid false positives
    by specifying log format.

    Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org>
    Reviewed-by: Norbert Pocs <norbertp@openssl.org>
    Reviewed-by: Nikola Pajkovsky <nikolap@openssl.org>
    Merge-date: Tue Nov  3 13:22:29 2026
    Merged-from: https://github.com/openssl/openssl/pull/33409

diff --git a/.github/workflows/check-news-changes.yml b/.github/workflows/check-news-changes.yml
index 3c460dfe6e..0f843f7cd4 100644
--- a/.github/workflows/check-news-changes.yml
+++ b/.github/workflows/check-news-changes.yml
@@ -41,10 +41,7 @@ jobs:
       - name: "Check if this PR affects a CVE"
         if: ${{ env.FOUND_NEWS_CHANGES_ADDITION == 'no' && env.SKIP_NEWS_CHECK == 'no' }}
         run: |
-          git log ${{ github.event.pull_request.base.sha }}..${{ github.event.pull_request.head.sha }} > ./log.txt
-          set +e
-          grep -q "CVE-" ./log.txt
-          if [ $? -eq 0 ]; then
+          if git log --pretty=format:%B ${{ github.event.pull_request.base.sha }}..${{ github.event.pull_request.head.sha }} | grep -q "CVE-"; then
             echo "Changes in this PR reference a CVE"
             echo "NEED_NEWS_CHANGES=yes" >> $GITHUB_ENV
           fi