fix zizmor findings in update_librarian_googleapis.yaml

Author: zhumin8

.github/workflows/update_librarian_googleapis.yaml

@@ -40,11 +40,13 @@ jobs:
     - name: Close Existing PR and Branch
       env:
         GH_TOKEN: ${{ secrets.CLOUD_JAVA_BOT_GITHUB_TOKEN }}
+        EVENT_NAME: ${{ github.event_name }}
+        REPOSITORY: ${{ github.repository }}
       run: |
         set -x
         current_branch="update-librarian-googleapis-main"
         
-        if [ "${{ github.event_name }}" = "pull_request" ]; then
+        if [ "${EVENT_NAME}" = "pull_request" ]; then
           echo "PR Test: Skipping cleanup."
         else
           # Try to find an open pull request associated with the branch
@@ -57,9 +59,9 @@ jobs:
           
           # Delete the remote branch if it still exists (e.g. if no PR was open)
           echo "Checking if remote branch ${current_branch} exists..."
-          if gh api "repos/${{ github.repository }}/git/refs/heads/${current_branch}" --silent 2>/dev/null; then
+          if gh api "repos/${REPOSITORY}/git/refs/heads/${current_branch}" --silent 2>/dev/null; then
             echo "Deleting remote branch ${current_branch}..."
-            gh api -X DELETE "repos/${{ github.repository }}/git/refs/heads/${current_branch}" || {
+            gh api -X DELETE "repos/${REPOSITORY}/git/refs/heads/${current_branch}" || {
               echo "Error: Failed to delete remote branch ${current_branch}."
               exit 1
             }
@@ -131,6 +133,8 @@ jobs:
       if: steps.detect_librarian.outputs.has_changes == 'true'
       env:
         GH_TOKEN: ${{ secrets.CLOUD_JAVA_BOT_GITHUB_TOKEN }}
+        EVENT_NAME: ${{ github.event_name }}
+        REPOSITORY: ${{ github.repository }}
         PR_TITLE: "chore: update googleapis commitish to ${{ steps.commit.outputs.short_commit }}"
         PR_BODY: |
           Updated googleapis commitish in librarian.yaml to https://github.com/googleapis/googleapis/commit/${{ steps.commit.outputs.new_commit }}
@@ -139,7 +143,7 @@ jobs:
       run: |
         set -x
         
-        if [ "${{ github.event_name }}" = "pull_request" ]; then
+        if [ "${EVENT_NAME}" = "pull_request" ]; then
           echo "=== PR Test: DRY RUN MODE ACTIVE ==="
           echo "Would have checked out branch: update-librarian-googleapis-main"
           echo "Would have committed configs with title: $PR_TITLE"
@@ -174,7 +178,7 @@ jobs:
         fi
         
         # Push to remote (force push to overwrite any stale branch on remote)
-        git remote add remote_repo https://cloud-java-bot:"${GH_TOKEN}@github.com/${{ github.repository }}.git" || git remote set-url remote_repo https://cloud-java-bot:"${GH_TOKEN}@github.com/${{ github.repository }}.git"
+        git remote add remote_repo https://cloud-java-bot:"${GH_TOKEN}@github.com/${REPOSITORY}.git" || git remote set-url remote_repo https://cloud-java-bot:"${GH_TOKEN}@github.com/${REPOSITORY}.git"
         git fetch -q remote_repo
         git push -f remote_repo "${current_branch}"