-
[OPIK-6582] [INFRA] [CI] fix: quote SC2086 vars across 6 high-density workflow files (#6753)
发布于
2026-05-19 16:31:22 +00:00 - [OPIK-6582] [INFRA] [CI] fix: quote SC2086 vars in build_and_push_docker.yaml
Quotes 14 GITHUB_OUTPUT/GITHUB_STEP_SUMMARY redirects and the docker
pull/save :$TAG references. The two SC2086 hits on
docker buildx imagetools create $TAG_ARGS $DIGESTSare intentional
argument-list expansion — annotated with# shellcheck disable=SC2086
and a rationale comment instead of quoting (quoting would collapse
each into a single argument and break the docker invocation).Parent: OPIK-6323. Third of 5 subtasks; SC2086 mid-density cluster
file 1 of 6.Co-Authored-By: Claude Opus 4.7 (1M context) noreply@anthropic.com
- fix(typescript_sdk_integration_publish): quote SC2086 redirects in Summary step
All 14 SC2086 findings were
>> $GITHUB_STEP_SUMMARYlines in the
Summary step. Quoting is purely defensive — the env var is a runner-
managed file path.- fix(sync_provider_models): quote SC2086 vars; mark FORCE_REGEN_FLAG arg-list intentional
Quotes 9 GITHUB_ENV/OUTPUT/STEP_SUMMARY redirects plus the
[ \$EXIT_CODE -eq 1 ]integer comparison. One arg-list case
(python ... \$FORCE_REGEN_FLAG ...) is intentionally unquoted —
the variable holds either--force-regenor empty string, acting
as an optional argv slot. Annotated with# shellcheck disable=SC2086
and rationale.- fix(sdks_generate_openapi_spec_and_fern_code): quote SC2086 GITHUB_* redirects
All 10 SC2086 findings were
>> $GITHUB_OUTPUT/>> $GITHUB_ENV
redirects. Quoting is purely defensive — runner-managed file paths.- fix(opik_wizard_publish): quote SC2086 redirects in Workflow summary step
All 10 SC2086 findings were
>> $GITHUB_STEP_SUMMARYin the
Workflow summary block.- fix(typescript_sdk_publish): quote SC2086 redirects in Summary step
All 7 SC2086 findings were
>> $GITHUB_STEP_SUMMARYin the Summary step.
Co-authored-by: Claude Opus 4.7 (1M context) noreply@anthropic.com
下载附件