Wrap condition in curly braces

Wrap condition in curly braces to prevent operator priority problems when the macro is used as a part of a bigger expression.
ComplianceAsCode · Feb 10, 2025 · 9c4e7c0 · 9c4e7c0
1 parent a4d098c
commit 9c4e7c0
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/shared/macros/10-bash.jinja b/shared/macros/10-bash.jinja
@@ -2669,15 +2669,15 @@ This macro defines a conditional expression that is evaluated as true
 if the remediation is performed during a build of a bootable container image.
 #}}
 {{%- macro bash_bootc_build() -%}}
-rpm --quiet -q kernel rpm-ostree bootc && ! rpm --quiet -q openshift-kubelet && { [ -f "/run/.containerenv" ] || [ -f "/.containerenv" ]; }
+{ rpm --quiet -q kernel rpm-ostree bootc && ! rpm --quiet -q openshift-kubelet && { [ -f "/run/.containerenv" ] || [ -f "/.containerenv" ]; }; }
 {{%- endmacro -%}}
 
 {{#
 This macro defines a conditional expression that is evaluated as true
 if the remediation is not performed during a build of a bootable container image.
 #}}
 {{%- macro bash_not_bootc_build() -%}}
-! ( {{{ bash_bootc_build() }}} )
+! {{{ bash_bootc_build() }}}
 {{%- endmacro -%}}