linter stuff

HHS · Nov 13, 2024 · db05817 · db05817
1 parent 7682e01
commit db05817
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/.github/workflows/vulnerability-scans.yml b/.github/workflows/vulnerability-scans.yml
@@ -112,17 +112,17 @@ jobs:
       - name: Download and extract the vulnerability DB
         if: steps.cache-trivy.outputs.cache-hit != 'true'
         run: |
-          mkdir -p $GITHUB_WORKSPACE/.cache/trivy/db
+          mkdir -p "$GITHUB_WORKSPACE/.cache/trivy/db"
           oras pull ghcr.io/aquasecurity/trivy-db:2
-          tar -xzf db.tar.gz -C $GITHUB_WORKSPACE/.cache/trivy/db
+          tar -xzf db.tar.gz -C "$GITHUB_WORKSPACE/.cache/trivy/db"
           rm db.tar.gz
 
       - name: Download and extract the Java DB
         if: steps.cache-trivy.outputs.cache-hit != 'true'
         run: |
-          mkdir -p $GITHUB_WORKSPACE/.cache/trivy/java-db
+          mkdir -p "$GITHUB_WORKSPACE/.cache/trivy/java-db"
           oras pull ghcr.io/aquasecurity/trivy-java-db:1
-          tar -xzf javadb.tar.gz -C $GITHUB_WORKSPACE/.cache/trivy/java-db
+          tar -xzf javadb.tar.gz -C "$GITHUB_WORKSPACE/.cache/trivy/java-db"
           rm javadb.tar.gz
 
       - name: Cache DBs