Function yamlStringValue

pkg/workflow/engine_helpers.go:338–353

yamlStringValue returns a YAML-safe representation of a string value. If the value starts with a YAML flow indicator ('{' or '[') or other characters that would cause it to be misinterpreted by YAML parsers, it wraps the value in single quotes. Any embedded single quotes are escaped by doubling them

(value string)

// that would cause it to be misinterpreted by YAML parsers, it wraps the value
// in single quotes. Any embedded single quotes are escaped by doubling them (' becomes ”).
func yamlStringValue(value string) string {
	if value == "" {
		return value
	}
	if quoted := quoteYAMLValueContainingColonSpace(value); quoted != value {
		return quoted
	}
	// Values starting with YAML flow indicators need quoting to be treated as strings.
	// '{' would be parsed as a YAML flow mapping, '[' as a YAML flow sequence.
	first := value[0]
	if first != '{' && first != '[' {
		return value
	}
	// Single-quote the value, escaping any embedded single quotes by doubling them.
	return "'" + strings.ReplaceAll(value, "'", "''") + "'"
}

// FilterEnvForSecrets filters environment variables to only include allowed secrets.
// This is a security measure to ensure that only necessary secrets are passed to the execution step.