diff --git a/.github/workflows/build-checks.yaml b/.github/workflows/build-checks.yaml index 1995ed4d5f..753d1c5784 100644 --- a/.github/workflows/build-checks.yaml +++ b/.github/workflows/build-checks.yaml @@ -49,8 +49,8 @@ jobs: steps: - name: Adjust a permission for repo run: | - sudo chown -R $USER:$USER $GITHUB_WORKSPACE $HOME - sudo rm -rf $GITHUB_WORKSPACE/* && echo "GITHUB_WORKSPACE removed" || { sleep 10 && sudo rm -rf $GITHUB_WORKSPACE/*; } + sudo chown -R "$USER":"$USER" "$GITHUB_WORKSPACE" "$HOME" + sudo rm -rf "$GITHUB_WORKSPACE"/* && echo "GITHUB_WORKSPACE removed" || { sleep 10 && sudo rm -rf "$GITHUB_WORKSPACE"/*; } sudo rm -f /tmp/kata_hybrid* # Sometime we got leftover from test_setup_hvsock_failed() - name: Checkout the code @@ -67,12 +67,12 @@ jobs: if: ${{ matrix.component == 'runtime' }} run: | ./tests/install_go.sh -f -p - echo "/usr/local/go/bin" >> $GITHUB_PATH + echo "/usr/local/go/bin" >> "$GITHUB_PATH" - name: Install rust if: ${{ matrix.component != 'runtime' }} run: | ./tests/install_rust.sh - echo "${HOME}/.cargo/bin" >> $GITHUB_PATH + echo "${HOME}/.cargo/bin" >> "$GITHUB_PATH" - name: Install musl-tools if: ${{ matrix.component != 'runtime' }} run: sudo apt-get -y install musl-tools @@ -86,8 +86,8 @@ jobs: gperf_install_dir=$(mktemp -d -t gperf.XXXXXXXXXX) ./ci/install_libseccomp.sh "${libseccomp_install_dir}" "${gperf_install_dir}" echo "Set environment variables for the libseccomp crate to link the libseccomp library statically" - echo "LIBSECCOMP_LINK_TYPE=static" >> $GITHUB_ENV - echo "LIBSECCOMP_LIB_PATH=${libseccomp_install_dir}/lib" >> $GITHUB_ENV + echo "LIBSECCOMP_LINK_TYPE=static" >> "$GITHUB_ENV" + echo "LIBSECCOMP_LIB_PATH=${libseccomp_install_dir}/lib" >> "$GITHUB_ENV" - name: Install protobuf-compiler if: ${{ matrix.command != 'make vendor' && (matrix.component == 'agent' || matrix.component == 'genpolicy' || matrix.component == 'agent-ctl') }} run: sudo apt-get -y install protobuf-compiler @@ -97,8 +97,8 @@ jobs: - name: Setup XDG_RUNTIME_DIR for the `runtime` tests if: ${{ matrix.command != 'make vendor' && matrix.command != 'make check' && matrix.component == 'runtime' }} run: | - XDG_RUNTIME_DIR=$(mktemp -d /tmp/kata-tests-$USER.XXX | tee >(xargs chmod 0700)) - echo "XDG_RUNTIME_DIR=${XDG_RUNTIME_DIR}" >> $GITHUB_ENV + XDG_RUNTIME_DIR=$(mktemp -d "/tmp/kata-tests-$USER.XXX" | tee >(xargs chmod 0700)) + echo "XDG_RUNTIME_DIR=${XDG_RUNTIME_DIR}" >> "$GITHUB_ENV" - name: Running `${{ matrix.command }}` for ${{ matrix.component }} run: | cd ${{ matrix.component-path }} diff --git a/.github/workflows/build-kata-static-tarball-amd64.yaml b/.github/workflows/build-kata-static-tarball-amd64.yaml index 76b170faa5..d2dac9d4bc 100644 --- a/.github/workflows/build-kata-static-tarball-amd64.yaml +++ b/.github/workflows/build-kata-static-tarball-amd64.yaml @@ -89,7 +89,7 @@ jobs: make "${KATA_ASSET}-tarball" build_dir=$(readlink -f build) # store-artifact does not work with symlink - mkdir -p kata-build && cp "${build_dir}"/kata-static-${KATA_ASSET}*.tar.* kata-build/. + mkdir -p kata-build && cp "${build_dir}"/kata-static-"${KATA_ASSET}"*.tar.* kata-build/. env: KATA_ASSET: ${{ matrix.asset }} TAR_OUTPUT: ${{ matrix.asset }}.tar.gz @@ -181,7 +181,7 @@ jobs: make "${KATA_ASSET}-tarball" build_dir=$(readlink -f build) # store-artifact does not work with symlink - mkdir -p kata-build && cp "${build_dir}"/kata-static-${KATA_ASSET}*.tar.* kata-build/. + mkdir -p kata-build && cp "${build_dir}"/kata-static-"${KATA_ASSET}"*.tar.* kata-build/. env: KATA_ASSET: ${{ matrix.asset }} TAR_OUTPUT: ${{ matrix.asset }}.tar.gz @@ -252,7 +252,7 @@ jobs: make "${KATA_ASSET}-tarball" build_dir=$(readlink -f build) # store-artifact does not work with symlink - mkdir -p kata-build && cp "${build_dir}"/kata-static-${KATA_ASSET}*.tar.* kata-build/. + mkdir -p kata-build && cp "${build_dir}"/kata-static-"${KATA_ASSET}"*.tar.* kata-build/. env: KATA_ASSET: shim-v2 TAR_OUTPUT: shim-v2.tar.gz diff --git a/.github/workflows/build-kata-static-tarball-arm64.yaml b/.github/workflows/build-kata-static-tarball-arm64.yaml index b277c6b159..b8adde4c2e 100644 --- a/.github/workflows/build-kata-static-tarball-arm64.yaml +++ b/.github/workflows/build-kata-static-tarball-arm64.yaml @@ -61,7 +61,7 @@ jobs: make "${KATA_ASSET}-tarball" build_dir=$(readlink -f build) # store-artifact does not work with symlink - mkdir -p kata-build && cp "${build_dir}"/kata-static-${KATA_ASSET}*.tar.* kata-build/. + mkdir -p kata-build && cp "${build_dir}"/kata-static-"${KATA_ASSET}"*.tar.* kata-build/. env: KATA_ASSET: ${{ matrix.asset }} TAR_OUTPUT: ${{ matrix.asset }}.tar.gz @@ -121,7 +121,7 @@ jobs: make "${KATA_ASSET}-tarball" build_dir=$(readlink -f build) # store-artifact does not work with symlink - mkdir -p kata-build && cp "${build_dir}"/kata-static-${KATA_ASSET}*.tar.* kata-build/. + mkdir -p kata-build && cp "${build_dir}"/kata-static-"${KATA_ASSET}"*.tar.* kata-build/. env: KATA_ASSET: ${{ matrix.asset }} TAR_OUTPUT: ${{ matrix.asset }}.tar.gz @@ -189,7 +189,7 @@ jobs: make "${KATA_ASSET}-tarball" build_dir=$(readlink -f build) # store-artifact does not work with symlink - mkdir -p kata-build && cp "${build_dir}"/kata-static-${KATA_ASSET}*.tar.* kata-build/. + mkdir -p kata-build && cp "${build_dir}"/kata-static-"${KATA_ASSET}"*.tar.* kata-build/. env: KATA_ASSET: shim-v2 TAR_OUTPUT: shim-v2.tar.gz @@ -214,7 +214,7 @@ jobs: steps: - name: Adjust a permission for repo run: | - sudo chown -R $USER:$USER $GITHUB_WORKSPACE + sudo chown -R "$USER":"$USER" "$GITHUB_WORKSPACE" - uses: actions/checkout@v4 with: diff --git a/.github/workflows/build-kata-static-tarball-ppc64le.yaml b/.github/workflows/build-kata-static-tarball-ppc64le.yaml index 3b2f2b8fcc..5f552b0db4 100644 --- a/.github/workflows/build-kata-static-tarball-ppc64le.yaml +++ b/.github/workflows/build-kata-static-tarball-ppc64le.yaml @@ -36,8 +36,8 @@ jobs: steps: - name: Prepare the self-hosted runner run: | - ${HOME}/scripts/prepare_runner.sh - sudo rm -rf $GITHUB_WORKSPACE/* + "${HOME}/scripts/prepare_runner.sh" + sudo rm -rf "$GITHUB_WORKSPACE"/* - name: Login to Kata Containers quay.io if: ${{ inputs.push-to-registry == 'yes' }} @@ -63,7 +63,7 @@ jobs: make "${KATA_ASSET}-tarball" build_dir=$(readlink -f build) # store-artifact does not work with symlink - mkdir -p kata-build && cp "${build_dir}"/kata-static-${KATA_ASSET}*.tar.* kata-build/. + mkdir -p kata-build && cp "${build_dir}"/kata-static-"${KATA_ASSET}"*.tar.* kata-build/. env: KATA_ASSET: ${{ matrix.asset }} TAR_OUTPUT: ${{ matrix.asset }}.tar.gz @@ -94,8 +94,8 @@ jobs: steps: - name: Prepare the self-hosted runner run: | - ${HOME}/scripts/prepare_runner.sh - sudo rm -rf $GITHUB_WORKSPACE/* + "${HOME}/scripts/prepare_runner.sh" + sudo rm -rf "$GITHUB_WORKSPACE"/* - name: Login to Kata Containers quay.io if: ${{ inputs.push-to-registry == 'yes' }} @@ -129,7 +129,7 @@ jobs: make "${KATA_ASSET}-tarball" build_dir=$(readlink -f build) # store-artifact does not work with symlink - mkdir -p kata-build && cp "${build_dir}"/kata-static-${KATA_ASSET}*.tar.* kata-build/. + mkdir -p kata-build && cp "${build_dir}"/kata-static-"${KATA_ASSET}"*.tar.* kata-build/. env: KATA_ASSET: ${{ matrix.asset }} TAR_OUTPUT: ${{ matrix.asset }}.tar.gz @@ -167,8 +167,8 @@ jobs: steps: - name: Prepare the self-hosted runner run: | - ${HOME}/scripts/prepare_runner.sh - sudo rm -rf $GITHUB_WORKSPACE/* + "${HOME}/scripts/prepare_runner.sh" + sudo rm -rf "$GITHUB_WORKSPACE"/* - name: Login to Kata Containers quay.io if: ${{ inputs.push-to-registry == 'yes' }} @@ -202,7 +202,7 @@ jobs: make "${KATA_ASSET}-tarball" build_dir=$(readlink -f build) # store-artifact does not work with symlink - mkdir -p kata-build && cp "${build_dir}"/kata-static-${KATA_ASSET}*.tar.* kata-build/. + mkdir -p kata-build && cp "${build_dir}"/kata-static-"${KATA_ASSET}"*.tar.* kata-build/. env: KATA_ASSET: shim-v2 TAR_OUTPUT: shim-v2.tar.gz @@ -227,7 +227,7 @@ jobs: steps: - name: Adjust a permission for repo run: | - sudo chown -R $USER:$USER $GITHUB_WORKSPACE + sudo chown -R "$USER":"$USER" "$GITHUB_WORKSPACE" - uses: actions/checkout@v4 with: diff --git a/.github/workflows/build-kata-static-tarball-s390x.yaml b/.github/workflows/build-kata-static-tarball-s390x.yaml index cd266b60bb..33ab09251d 100644 --- a/.github/workflows/build-kata-static-tarball-s390x.yaml +++ b/.github/workflows/build-kata-static-tarball-s390x.yaml @@ -67,7 +67,7 @@ jobs: make "${KATA_ASSET}-tarball" build_dir=$(readlink -f build) # store-artifact does not work with symlink - mkdir -p kata-build && cp "${build_dir}"/kata-static-${KATA_ASSET}*.tar.* kata-build/. + mkdir -p kata-build && cp "${build_dir}"/kata-static-"${KATA_ASSET}"*.tar.* kata-build/. env: KATA_ASSET: ${{ matrix.asset }} TAR_OUTPUT: ${{ matrix.asset }}.tar.gz @@ -153,7 +153,7 @@ jobs: make "${KATA_ASSET}-tarball" build_dir=$(readlink -f build) # store-artifact does not work with symlink - mkdir -p kata-build && cp "${build_dir}"/kata-static-${KATA_ASSET}*.tar.* kata-build/. + mkdir -p kata-build && cp "${build_dir}"/kata-static-"${KATA_ASSET}"*.tar.* kata-build/. env: KATA_ASSET: ${{ matrix.asset }} TAR_OUTPUT: ${{ matrix.asset }}.tar.gz @@ -268,7 +268,7 @@ jobs: make "${KATA_ASSET}-tarball" build_dir=$(readlink -f build) # store-artifact does not work with symlink - mkdir -p kata-build && cp "${build_dir}"/kata-static-${KATA_ASSET}*.tar.* kata-build/. + mkdir -p kata-build && cp "${build_dir}"/kata-static-"${KATA_ASSET}"*.tar.* kata-build/. env: KATA_ASSET: shim-v2 TAR_OUTPUT: shim-v2.tar.gz diff --git a/.github/workflows/ci-nightly-s390x.yaml b/.github/workflows/ci-nightly-s390x.yaml index f3817520a1..3ffec86e23 100644 --- a/.github/workflows/ci-nightly-s390x.yaml +++ b/.github/workflows/ci-nightly-s390x.yaml @@ -16,6 +16,6 @@ jobs: - name: Fetch a test result for {{ matrix.test_title }} run: | file_name="${TEST_TITLE}-$(date +%Y-%m-%d).log" - /home/${USER}/script/handle_test_log.sh download $file_name + "/home/${USER}/script/handle_test_log.sh" download "$file_name" env: TEST_TITLE: ${{ matrix.test_title }} diff --git a/.github/workflows/docs-url-alive-check.yaml b/.github/workflows/docs-url-alive-check.yaml index a133437981..a55e3c6f2e 100644 --- a/.github/workflows/docs-url-alive-check.yaml +++ b/.github/workflows/docs-url-alive-check.yaml @@ -19,8 +19,8 @@ jobs: GOPATH: ${{ runner.workspace }}/kata-containers - name: Set env run: | - echo "GOPATH=${{ github.workspace }}" >> $GITHUB_ENV - echo "${{ github.workspace }}/bin" >> $GITHUB_PATH + echo "GOPATH=${{ github.workspace }}" >> "$GITHUB_ENV" + echo "${{ github.workspace }}/bin" >> "$GITHUB_PATH" - name: Checkout code uses: actions/checkout@v4 with: @@ -29,4 +29,4 @@ jobs: # docs url alive check - name: Docs URL Alive Check run: | - cd ${GOPATH}/src/github.com/${{ github.repository }} && make docs-url-alive-check + cd "${GOPATH}/src/github.com/${{ github.repository }}" && make docs-url-alive-check diff --git a/.github/workflows/kata-runtime-classes-sync.yaml b/.github/workflows/kata-runtime-classes-sync.yaml index ae3935872b..108360de64 100644 --- a/.github/workflows/kata-runtime-classes-sync.yaml +++ b/.github/workflows/kata-runtime-classes-sync.yaml @@ -22,7 +22,7 @@ jobs: echo "::group::Combine runtime classes" for runtimeClass in `find . -type f \( -name "*.yaml" -and -not -name "kata-runtimeClasses.yaml" \) | sort`; do echo "Adding ${runtimeClass} to the resultingRuntimeClasses.yaml" - cat ${runtimeClass} >> resultingRuntimeClasses.yaml; + cat "${runtimeClass}" >> resultingRuntimeClasses.yaml; done echo "::endgroup::" echo "::group::Displaying the content of resultingRuntimeClasses.yaml" diff --git a/.github/workflows/publish-kata-deploy-payload-arm64.yaml b/.github/workflows/publish-kata-deploy-payload-arm64.yaml index 5a6737f7ae..90dcd72150 100644 --- a/.github/workflows/publish-kata-deploy-payload-arm64.yaml +++ b/.github/workflows/publish-kata-deploy-payload-arm64.yaml @@ -28,7 +28,7 @@ jobs: steps: - name: Adjust a permission for repo run: | - sudo chown -R $USER:$USER $GITHUB_WORKSPACE + sudo chown -R "$USER":"$USER" "$GITHUB_WORKSPACE" - uses: actions/checkout@v4 with: @@ -68,4 +68,3 @@ jobs: ./tools/packaging/kata-deploy/local-build/kata-deploy-build-and-upload-payload.sh \ $(pwd)/kata-static.tar.xz \ ${{ inputs.registry }}/${{ inputs.repo }} ${{ inputs.tag }} - diff --git a/.github/workflows/publish-kata-deploy-payload-ppc64le.yaml b/.github/workflows/publish-kata-deploy-payload-ppc64le.yaml index 04f423d3e4..06d48d61fe 100644 --- a/.github/workflows/publish-kata-deploy-payload-ppc64le.yaml +++ b/.github/workflows/publish-kata-deploy-payload-ppc64le.yaml @@ -28,12 +28,12 @@ jobs: steps: - name: Prepare the self-hosted runner run: | - ${HOME}/scripts/prepare_runner.sh - sudo rm -rf $GITHUB_WORKSPACE/* + "${HOME}/scripts/prepare_runner.sh" + sudo rm -rf "$GITHUB_WORKSPACE"/* - name: Adjust a permission for repo run: | - sudo chown -R $USER:$USER $GITHUB_WORKSPACE + sudo chown -R "$USER":"$USER" "$GITHUB_WORKSPACE" - uses: actions/checkout@v4 with: diff --git a/.github/workflows/release-amd64.yaml b/.github/workflows/release-amd64.yaml index 4ac868cdf2..14bf51739d 100644 --- a/.github/workflows/release-amd64.yaml +++ b/.github/workflows/release-amd64.yaml @@ -42,7 +42,7 @@ jobs: run: | # We need to do such trick here as the format of the $GITHUB_REF # is "refs/tags/<tag>" - tag=$(echo $GITHUB_REF | cut -d/ -f3-) + tag=$(echo "$GITHUB_REF" | cut -d/ -f3-) if [ "${tag}" = "main" ]; then tag=$(./tools/packaging/release/release.sh release-version) tags=(${tag} "latest") diff --git a/.github/workflows/release-arm64.yaml b/.github/workflows/release-arm64.yaml index 5003606e1a..302a300751 100644 --- a/.github/workflows/release-arm64.yaml +++ b/.github/workflows/release-arm64.yaml @@ -42,7 +42,7 @@ jobs: run: | # We need to do such trick here as the format of the $GITHUB_REF # is "refs/tags/<tag>" - tag=$(echo $GITHUB_REF | cut -d/ -f3-) + tag=$(echo "$GITHUB_REF" | cut -d/ -f3-) if [ "${tag}" = "main" ]; then tag=$(./tools/packaging/release/release.sh release-version) tags=(${tag} "latest") diff --git a/.github/workflows/release-ppc64le.yaml b/.github/workflows/release-ppc64le.yaml index 36f0379de5..3528fe29a0 100644 --- a/.github/workflows/release-ppc64le.yaml +++ b/.github/workflows/release-ppc64le.yaml @@ -20,8 +20,8 @@ jobs: steps: - name: Prepare the self-hosted runner run: | - bash ${HOME}/scripts/prepare_runner.sh - sudo rm -rf $GITHUB_WORKSPACE/* + bash "${HOME}/scripts/prepare_runner.sh" + sudo rm -rf "$GITHUB_WORKSPACE"/* - name: Login to Kata Containers docker.io uses: docker/login-action@v3 @@ -47,7 +47,7 @@ jobs: run: | # We need to do such trick here as the format of the $GITHUB_REF # is "refs/tags/<tag>" - tag=$(echo $GITHUB_REF | cut -d/ -f3-) + tag=$(echo "$GITHUB_REF" | cut -d/ -f3-) if [ "${tag}" = "main" ]; then tag=$(./tools/packaging/release/release.sh release-version) tags=(${tag} "latest") diff --git a/.github/workflows/release-s390x.yaml b/.github/workflows/release-s390x.yaml index 4d54c90e02..3d7edb3667 100644 --- a/.github/workflows/release-s390x.yaml +++ b/.github/workflows/release-s390x.yaml @@ -42,7 +42,7 @@ jobs: run: | # We need to do such trick here as the format of the $GITHUB_REF # is "refs/tags/<tag>" - tag=$(echo $GITHUB_REF | cut -d/ -f3-) + tag=$(echo "$GITHUB_REF" | cut -d/ -f3-) if [ "${tag}" = "main" ]; then tag=$(./tools/packaging/release/release.sh release-version) tags=(${tag} "latest") diff --git a/.github/workflows/run-cri-containerd-tests-ppc64le.yaml b/.github/workflows/run-cri-containerd-tests-ppc64le.yaml index 8a8a8e9c66..2614f63ea6 100644 --- a/.github/workflows/run-cri-containerd-tests-ppc64le.yaml +++ b/.github/workflows/run-cri-containerd-tests-ppc64le.yaml @@ -30,12 +30,12 @@ jobs: KATA_HYPERVISOR: ${{ matrix.vmm }} steps: - name: Adjust a permission for repo - run: sudo chown -R $USER:$USER $GITHUB_WORKSPACE - + run: sudo chown -R "$USER":"$USER" "$GITHUB_WORKSPACE" + - name: Prepare the self-hosted runner run: | - bash ${HOME}/scripts/prepare_runner.sh cri-containerd - sudo rm -rf $GITHUB_WORKSPACE/* + bash "${HOME}/scripts/prepare_runner.sh" cri-containerd + sudo rm -rf "$GITHUB_WORKSPACE"/* - uses: actions/checkout@v4 with: @@ -62,6 +62,6 @@ jobs: - name: Run cri-containerd tests run: bash tests/integration/cri-containerd/gha-run.sh run - + - name: Cleanup actions for the self hosted runner - run: ${HOME}/scripts/cleanup_runner.sh + run: bash "${HOME}/scripts/cleanup_runner.sh" diff --git a/.github/workflows/run-k8s-tests-on-ppc64le.yaml b/.github/workflows/run-k8s-tests-on-ppc64le.yaml index e8d7d929dc..5c6a885f07 100644 --- a/.github/workflows/run-k8s-tests-on-ppc64le.yaml +++ b/.github/workflows/run-k8s-tests-on-ppc64le.yaml @@ -44,9 +44,9 @@ jobs: TARGET_ARCH: "ppc64le" steps: - name: Prepare the self-hosted runner - run: | - bash ${HOME}/scripts/prepare_runner.sh kubernetes - sudo rm -rf $GITHUB_WORKSPACE/* + run: | + bash "${HOME}/scripts/prepare_runner.sh" kubernetes + sudo rm -rf "$GITHUB_WORKSPACE"/* - uses: actions/checkout@v4 with: @@ -62,13 +62,13 @@ jobs: - name: Install golang run: | ./tests/install_go.sh -f -p - echo "/usr/local/go/bin" >> $GITHUB_PATH + echo "/usr/local/go/bin" >> "$GITHUB_PATH" - name: Prepare the runner for k8s cluster creation - run: bash ${HOME}/scripts/k8s_cluster_cleanup.sh + run: bash "${HOME}/scripts/k8s_cluster_cleanup.sh" - name: Create k8s cluster using kubeadm - run: bash ${HOME}/scripts/k8s_cluster_create.sh + run: bash "${HOME}/scripts/k8s_cluster_create.sh" - name: Deploy Kata timeout-minutes: 10 @@ -79,4 +79,4 @@ jobs: run: bash tests/integration/kubernetes/gha-run.sh run-tests - name: Delete cluster and post cleanup actions - run: bash ${HOME}/scripts/k8s_cluster_cleanup.sh + run: bash "${HOME}/scripts/k8s_cluster_cleanup.sh" diff --git a/.github/workflows/run-k8s-tests-on-zvsi.yaml b/.github/workflows/run-k8s-tests-on-zvsi.yaml index debe41939c..8b18ea8cfe 100644 --- a/.github/workflows/run-k8s-tests-on-zvsi.yaml +++ b/.github/workflows/run-k8s-tests-on-zvsi.yaml @@ -88,13 +88,13 @@ jobs: TARGET_BRANCH: ${{ inputs.target-branch }} - name: Set SNAPSHOTTER to empty if overlayfs - run: echo "SNAPSHOTTER=" >> $GITHUB_ENV + run: echo "SNAPSHOTTER=" >> "$GITHUB_ENV" if: ${{ matrix.snapshotter == 'overlayfs' }} - name: Set KBS and KBS_INGRESS if qemu-coco-dev run: | - echo "KBS=true" >> $GITHUB_ENV - echo "KBS_INGRESS=nodeport" >> $GITHUB_ENV + echo "KBS=true" >> "$GITHUB_ENV" + echo "KBS_INGRESS=nodeport" >> "$GITHUB_ENV" if: ${{ matrix.vmm == 'qemu-coco-dev' }} # qemu-runtime-rs only works with overlayfs diff --git a/.github/workflows/static-checks.yaml b/.github/workflows/static-checks.yaml index cf33405967..1438c634e4 100644 --- a/.github/workflows/static-checks.yaml +++ b/.github/workflows/static-checks.yaml @@ -31,8 +31,8 @@ jobs: run: | kernel_dir="tools/packaging/kernel/" kernel_version_file="${kernel_dir}kata_config_version" - modified_files=$(git diff --name-only origin/$GITHUB_BASE_REF..HEAD) - if git diff --name-only origin/$GITHUB_BASE_REF..HEAD "${kernel_dir}" | grep "${kernel_dir}"; then + modified_files=$(git diff --name-only origin/"$GITHUB_BASE_REF"..HEAD) + if git diff --name-only origin/"$GITHUB_BASE_REF"..HEAD "${kernel_dir}" | grep "${kernel_dir}"; then echo "Kernel directory has changed, checking if $kernel_version_file has been updated" if echo "$modified_files" | grep -v "README.md" | grep "${kernel_dir}" >>"/dev/null"; then echo "$modified_files" | grep "$kernel_version_file" >>/dev/null || ( echo "Please bump version in $kernel_version_file" && exit 1) @@ -107,19 +107,19 @@ jobs: path: ./src/github.com/${{ github.repository }} - name: Install yq run: | - cd ${GOPATH}/src/github.com/${{ github.repository }} + cd "${GOPATH}/src/github.com/${{ github.repository }}" ./ci/install_yq.sh env: INSTALL_IN_GOPATH: false - name: Install golang run: | - cd ${GOPATH}/src/github.com/${{ github.repository }} + cd "${GOPATH}/src/github.com/${{ github.repository }}" ./tests/install_go.sh -f -p - echo "/usr/local/go/bin" >> $GITHUB_PATH + echo "/usr/local/go/bin" >> "$GITHUB_PATH" - name: Install system dependencies run: | sudo apt-get -y install moreutils hunspell hunspell-en-gb hunspell-en-us pandoc - name: Run check run: | - export PATH=${PATH}:${GOPATH}/bin - cd ${GOPATH}/src/github.com/${{ github.repository }} && ${{ matrix.cmd }} + export PATH="${PATH}:${GOPATH}/bin" + cd "${GOPATH}/src/github.com/${{ github.repository }}" && ${{ matrix.cmd }}