Skip to content

Correct issue introduced in commit ee6a4f5 (related to #343)#344

Open
nicolargo wants to merge 1 commit into
aquasecurity:masterfrom
nicolargo:patch/343
Open

Correct issue introduced in commit ee6a4f5 (related to #343)#344
nicolargo wants to merge 1 commit into
aquasecurity:masterfrom
nicolargo:patch/343

Conversation

@nicolargo

Copy link
Copy Markdown

Remove the " typo.

@CLAassistant

CLAassistant commented Apr 26, 2024

Copy link
Copy Markdown

CLA assistant check
All committers have signed the CLA.

@AkselAllas

Copy link
Copy Markdown

@simar7

@AkselAllas

Copy link
Copy Markdown

This repo's standards need to be increased. This PR should have failed via an automated test.

Tons of action's users just wasted time on this mistake.

Comment thread entrypoint.sh
elif [ $trivyConfig ]; then
echo "Running Trivy with trivy.yaml config from: " $trivyConfig
trivy --config $trivyConfig ${scanType} ${ARGS}" ${artifactRef}
trivy --config $trivyConfig ${scanType} ${ARGS} ${artifactRef}

@aitrics-ray aitrics-ray Apr 26, 2024

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

While we're at it, it'd be nice to meet conventions.

Suggested change
trivy --config $trivyConfig ${scanType} ${ARGS} ${artifactRef}
echo "Running Trivy with trivy.yaml config from: ${trivyConfig}"
trivy --config "${trivyConfig}" "${scanType}" "${ARGS}" "${artifactRef}"

FYI
https://google.github.io/styleguide/shellguide.html#s5.6-variable-expansion

@AkselAllas AkselAllas Apr 26, 2024

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should be "${trivyConfig}" "${scanType}" "${ARGS}" "${artifactRef}" unless ARGS really needs to be unquoted.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Agreed

@StemadsenCardlay

Copy link
Copy Markdown

@nicolargo I think you need to sign the CLA

@nicolargo

Copy link
Copy Markdown
Author

@nicolargo I think you need to sign the CLA

I do...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants