From 9cac40f42e4799f018906aa8c80625e230606892 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 26 Jun 2026 22:30:41 +0000
Subject: [PATCH 1/2] Quote shell variables in action

---
 action.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/action.yml b/action.yml
index 672982a..545cd85 100644
--- a/action.yml
+++ b/action.yml
@@ -36,7 +36,7 @@ runs:
       esac
 
       os="${RUNNER_OS}"
-      if [[ $os == "macOS" ]]; then
+      if [[ "$os" == "macOS" ]]; then
         os="Darwin"
       fi
 
@@ -50,14 +50,14 @@ runs:
         out=crane.exe
       fi
 
-      if [[ ! -z ${url} ]]; then
+      if [[ ! -z "${url}" ]]; then
         echo "Installing crane for ${os} on ${arch}"
         tmp=$(mktemp -d)
         cd ${tmp}
         fname="go-containerregistry_${os}_${arch}.tar.gz"
         curl -o "$fname" -fsSL --retry 5 --retry-delay 1 --retry-all-errors "${url}/${fname}"
-        tar xzf "$fname" ${out}
-        chmod +x ${tmp}/${out}
+        tar xzf "$fname" "${out}"
+        chmod +x "${tmp}/${out}"
         PATH=${PATH}:${tmp}
         echo "${tmp}" >> $GITHUB_PATH
       fi

From 706a72cba052d6ee1907a4830066f83ae4879d8e Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 26 Jun 2026 22:31:13 +0000
Subject: [PATCH 2/2] Quote remaining shell variables

---
 action.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/action.yml b/action.yml
index 545cd85..2087b79 100644
--- a/action.yml
+++ b/action.yml
@@ -53,13 +53,13 @@ runs:
       if [[ ! -z "${url}" ]]; then
         echo "Installing crane for ${os} on ${arch}"
         tmp=$(mktemp -d)
-        cd ${tmp}
+        cd "${tmp}"
         fname="go-containerregistry_${os}_${arch}.tar.gz"
         curl -o "$fname" -fsSL --retry 5 --retry-delay 1 --retry-all-errors "${url}/${fname}"
         tar xzf "$fname" "${out}"
         chmod +x "${tmp}/${out}"
-        PATH=${PATH}:${tmp}
-        echo "${tmp}" >> $GITHUB_PATH
+        PATH="${PATH}:${tmp}"
+        echo "${tmp}" >> "$GITHUB_PATH"
       fi
 
       # NB: username doesn't seem to matter.