Unverified Commit c2db5254 authored by David Dias's avatar David Dias Committed by GitLab
Browse files

fix(cosign): quote COSIGN_PRIVATE_KEY variable to prevent word splitting

parent 63f6611d

templates/gitlab-ci-docker.yml

+2 −2
Original line number Diff line number Diff line
@@ -854,11 +854,11 @@ stages: 
  }



  configure_cosign_private_key() {

    if [[ -z ${DOCKER_COSIGN_PRIVATE_KEY:-$COSIGN_PRIVATE_KEY} ]]

    if [[ -z "${DOCKER_COSIGN_PRIVATE_KEY:-$COSIGN_PRIVATE_KEY}" ]]

    then

      fail "Cosign private key is not defined"

    fi

    if [[ -f ${DOCKER_COSIGN_PRIVATE_KEY:-$COSIGN_PRIVATE_KEY} ]]

    if [[ -f "${DOCKER_COSIGN_PRIVATE_KEY:-$COSIGN_PRIVATE_KEY}" ]]

    then

      docker_cosign_private_key=${DOCKER_COSIGN_PRIVATE_KEY:-$COSIGN_PRIVATE_KEY}

    else