prevent workflow command injection in metadata logs

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

src/main.ts

@@ -137,7 +137,7 @@ actionsToolkit.run(
     if (metadata) {
       await core.group(`Metadata`, async () => {
         const metadatadt = JSON.stringify(metadata, null, 2);
-        core.info(metadatadt);
+        GitHub.printUntrusted(metadatadt);
         core.setOutput('metadata', metadatadt);
       });
     }