3 ms·
The recommendation is not to interpolate certain things into shell scripts. Don't interpolate _anything_ into shell scripts as a rule. Use environment variables
by Arch-TK 1y ago
The recommendation is not to interpolate certain things into shell scripts. Don't interpolate _anything_ into shell scripts as a rule. Use environment variables.
This combined with people having no clue how to write bash well/safely is a major source of security issues in these things.
- cedws 1y agoZizmor has a check for this. https://github.com/woodruffw/zizmor https://github.com/woodruffw/zizmor