瀏覽代碼

Harden shell quoting in CI pipeline definitions (#33789)

GitOrigin-RevId: a21c02f632b1e357ba18a86378d796a0d93fa484
Simon Gardner 2 月之前
父節點
當前提交
2233ac9b1d
共有 1 個文件被更改,包括 6 次插入6 次删除
  1. 6 6
      server-ce/cloudbuild.public.yaml

+ 6 - 6
server-ce/cloudbuild.public.yaml

@@ -10,9 +10,9 @@ steps:
     script: |
     script: |
       #!/usr/bin/env bash
       #!/usr/bin/env bash
       set -e
       set -e
-      if [ ${BRANCH_NAME} == main ]; then
-        docker tag ${_IMAGE_BASE} ${_IMAGE_BASE_LATEST};
-        docker push ${_IMAGE_BASE_LATEST};
+      if [ "${BRANCH_NAME}" = "main" ]; then
+        docker tag "${_IMAGE_BASE}" "${_IMAGE_BASE_LATEST}";
+        docker push "${_IMAGE_BASE_LATEST}";
       fi
       fi
     automapSubstitutions: true
     automapSubstitutions: true
   - id: prefetch_ce
   - id: prefetch_ce
@@ -39,9 +39,9 @@ steps:
     script: |
     script: |
       #!/usr/bin/env bash
       #!/usr/bin/env bash
       set -e
       set -e
-      if [ $BRANCH_NAME == main ]; then
-        docker tag ${_IMAGE_TAG} ${_IMAGE_TAG_LATEST};
-        docker push ${_IMAGE_TAG_LATEST};
+      if [ "${BRANCH_NAME}" = "main" ]; then
+        docker tag "${_IMAGE_TAG}" "${_IMAGE_TAG_LATEST}";
+        docker push "${_IMAGE_TAG_LATEST}";
       fi
       fi
     automapSubstitutions: true
     automapSubstitutions: true
     waitFor:
     waitFor: