From bdec21efd9abbd6bb0216e24efeb817a194247a7 Mon Sep 17 00:00:00 2001
From: vil02 <vil02@o2.pl>
Date: Sun, 7 Jul 2024 21:59:03 +0200
Subject: [PATCH] Prevent globbing and word splitting

---
 cleanup.sh    | 2 +-
 entrypoint.sh | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/cleanup.sh b/cleanup.sh
index 72d5f41..8a5e4c9 100644
--- a/cleanup.sh
+++ b/cleanup.sh
@@ -10,5 +10,5 @@ fi
 _tmp_file=$(ls "${INPUT_PROJECTBASEDIR}/" | head -1)
 PERM=$(stat -c "%u:%g" "${INPUT_PROJECTBASEDIR}/$_tmp_file")
 
-chown -R $PERM "${INPUT_PROJECTBASEDIR}/.scannerwork/"
+chown -R "$PERM" "${INPUT_PROJECTBASEDIR}/.scannerwork/"
 
diff --git a/entrypoint.sh b/entrypoint.sh
index 9cd1c40..cbba81a 100755
--- a/entrypoint.sh
+++ b/entrypoint.sh
@@ -27,4 +27,4 @@ if [[ "$RUNNER_DEBUG" == '1' ]]; then
 fi
 
 unset JAVA_HOME
-sonar-scanner $debug_flag -Dsonar.projectBaseDir=${INPUT_PROJECTBASEDIR} -Dsonar.host.url=${SONARCLOUD_URL} ${INPUT_ARGS}
+sonar-scanner "$debug_flag" -Dsonar.projectBaseDir="${INPUT_PROJECTBASEDIR}" -Dsonar.host.url="${SONARCLOUD_URL}" "${INPUT_ARGS}"