fix: semgrep finding in github workflow

Author: dhruvparekh12

.github/workflows/release.yml

@@ -52,7 +52,7 @@ jobs:
         id: release-plugin
         uses: JS-DevTools/npm-publish@v2.2.0
         with:
-          token: ${{ secrets.NPM_TOKEN }}
+          token: "${{ secrets.NPM_TOKEN }}"
           access: public
       - name: get-npm-version
         id: package-version
@@ -61,4 +61,5 @@ jobs:
         id: github-release
         env:
           GITHUB_TOKEN: ${{ secrets.PKG_TOKEN }}
-        run:  gh release create v${{ steps.release-plugin.outputs.version }} --title "Release ${{ steps.release-plugin.outputs.version }}" --generate-notes
+          VERSION: ${{ steps.release-plugin.outputs.version }}
+        run: gh release create v"$VERSION" --title "Release $VERSION" --generate-notes