[ 
https://issues.apache.org/jira/browse/YETUS-1222?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Allen Wittenauer updated YETUS-1222:
------------------------------------
    Description: There is an unprotected EXTRA_ARGS in smart-apply-patch that 
newer versions of shellcheck (correctly) mark as SC2086.  Given that it appears 
to be undocumented and  how passing --gpg-sign will break any external input, 
let's change it to correctly be an array.  It is still not recommended to 
depend on this variable, however.  (was: There is an unprotected EXTRA_ARGS in 
smart-apply-patch that newer versions of shellcheck (correctly) mark as SC2086. 
 Given that it appears to be undocumented and  how passing --gpg-sign will 
break any external input, let's change it to correctly be an array.)

> smart-apply-patch EXTRA_ARGS should be an array
> -----------------------------------------------
>
>                 Key: YETUS-1222
>                 URL: https://issues.apache.org/jira/browse/YETUS-1222
>             Project: Yetus
>          Issue Type: Bug
>          Components: Precommit
>    Affects Versions: 0.14.1
>            Reporter: Allen Wittenauer
>            Assignee: Allen Wittenauer
>            Priority: Major
>
> There is an unprotected EXTRA_ARGS in smart-apply-patch that newer versions 
> of shellcheck (correctly) mark as SC2086.  Given that it appears to be 
> undocumented and  how passing --gpg-sign will break any external input, let's 
> change it to correctly be an array.  It is still not recommended to depend on 
> this variable, however.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to