Prevent globbing and word splitting

SonarSource · Jul 7, 2024 · bdec21e · bdec21e
1 parent e44258b
commit bdec21e
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/cleanup.sh b/cleanup.sh
@@ -10,5 +10,5 @@ fi
 _tmp_file=$(ls "${INPUT_PROJECTBASEDIR}/" | head -1)
 PERM=$(stat -c "%u:%g" "${INPUT_PROJECTBASEDIR}/$_tmp_file")
 
-chown -R $PERM "${INPUT_PROJECTBASEDIR}/.scannerwork/"
+chown -R "$PERM" "${INPUT_PROJECTBASEDIR}/.scannerwork/"
 
diff --git a/entrypoint.sh b/entrypoint.sh
@@ -27,4 +27,4 @@ if [[ "$RUNNER_DEBUG" == '1' ]]; then
 fi
 
 unset JAVA_HOME
-sonar-scanner $debug_flag -Dsonar.projectBaseDir=${INPUT_PROJECTBASEDIR} -Dsonar.host.url=${SONARCLOUD_URL} ${INPUT_ARGS}
+sonar-scanner "$debug_flag" -Dsonar.projectBaseDir="${INPUT_PROJECTBASEDIR}" -Dsonar.host.url="${SONARCLOUD_URL}" "${INPUT_ARGS}"