发布

  • [OPIK-6582] [INFRA] [CI] fix: quote SC2086 vars across 6 high-density workflow files (#6753)

    frostbyte_neo 发布于 2026-05-19 16:31:22 +00:00

    • [OPIK-6582] [INFRA] [CI] fix: quote SC2086 vars in build_and_push_docker.yaml

    Quotes 14 GITHUB_OUTPUT/GITHUB_STEP_SUMMARY redirects and the docker
    pull/save :$TAG references. The two SC2086 hits on
    docker buildx imagetools create $TAG_ARGS $DIGESTS are intentional
    argument-list expansion — annotated with # shellcheck disable=SC2086
    and a rationale comment instead of quoting (quoting would collapse
    each into a single argument and break the docker invocation).

    Parent: OPIK-6323. Third of 5 subtasks; SC2086 mid-density cluster
    file 1 of 6.

    Co-Authored-By: Claude Opus 4.7 (1M context) noreply@anthropic.com

    • fix(typescript_sdk_integration_publish): quote SC2086 redirects in Summary step

    All 14 SC2086 findings were >> $GITHUB_STEP_SUMMARY lines in the
    Summary step. Quoting is purely defensive — the env var is a runner-
    managed file path.

    • fix(sync_provider_models): quote SC2086 vars; mark FORCE_REGEN_FLAG arg-list intentional

    Quotes 9 GITHUB_ENV/OUTPUT/STEP_SUMMARY redirects plus the
    [ \$EXIT_CODE -eq 1 ] integer comparison. One arg-list case
    (python ... \$FORCE_REGEN_FLAG ...) is intentionally unquoted —
    the variable holds either --force-regen or empty string, acting
    as an optional argv slot. Annotated with # shellcheck disable=SC2086
    and rationale.

    • fix(sdks_generate_openapi_spec_and_fern_code): quote SC2086 GITHUB_* redirects

    All 10 SC2086 findings were >> $GITHUB_OUTPUT / >> $GITHUB_ENV
    redirects. Quoting is purely defensive — runner-managed file paths.

    • fix(opik_wizard_publish): quote SC2086 redirects in Workflow summary step

    All 10 SC2086 findings were >> $GITHUB_STEP_SUMMARY in the
    Workflow summary block.

    • fix(typescript_sdk_publish): quote SC2086 redirects in Summary step

    All 7 SC2086 findings were >> $GITHUB_STEP_SUMMARY in the Summary step.


    Co-authored-by: Claude Opus 4.7 (1M context) noreply@anthropic.com

    下载附件