add double quote in image-sign.sh to prevent globbing and word splitting

Signed-off-by: LiZhenCheng9527 <[email protected]>
LiZhenCheng9527 · Jan 27, 2024 · 9075db3 · 9075db3
1 parent 853543c
commit 9075db3
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/hack/image-sign.sh b/hack/image-sign.sh
@@ -7,11 +7,11 @@ SIGN_IMAGE=${SIGN_IMAGE:-"0"}
 CLUSTER_OPERATOR_IMAGE=${CLUSTER_OPERATOR_IMAGE:-"${IMAGE_HUB}/cluster-operator:${IMAGE_TAG}"}
 FLEET_MANAGER_IMAGE=${FLEET_MANAGER_IMAGE:-"${IMAGE_HUB}/fleet-manager:${IMAGE_TAG}"}
 
-if [ $SIGN_IMAGE = "1" ]; then
-    echo "Sign image: "${CLUSTER_OPERATOR_IMAGE}
-    cosign sign --yes ${CLUSTER_OPERATOR_IMAGE}
-    echo "Sign image: "${FLEET_MANAGER_IMAGE}
-    cosign sign --yes ${FLEET_MANAGER_IMAGE}
+if [ "$SIGN_IMAGE" = "1" ]; then
+    echo "Sign image: ""${CLUSTER_OPERATOR_IMAGE}"
+    cosign sign --yes "${CLUSTER_OPERATOR_IMAGE}"
+    echo "Sign image: ""${FLEET_MANAGER_IMAGE}"
+    cosign sign --yes "${FLEET_MANAGER_IMAGE}"
 else
     echo "Warning: The build image is not signed"
 fi