Function TestBuildDockerCommandWithExpandableVars

pkg/workflow/shell_test.go:200–281

(t *testing.T)

}

func TestBuildDockerCommandWithExpandableVars(t *testing.T) {
	tests := []struct {
		name     string
		input    string
		expected string
	}{
		{
			name:     "simple command without variables",
			input:    "docker run hello",
			expected: "'docker run hello'",
		},
		{
			name:     "command with single GITHUB_WORKSPACE",
			input:    "docker run -v ${GITHUB_WORKSPACE}:${GITHUB_WORKSPACE}",
			expected: "'docker run -v '\"${GITHUB_WORKSPACE}\"':'\"${GITHUB_WORKSPACE}\"''",
		},
		{
			name:     "command with GITHUB_WORKSPACE at the start",
			input:    "${GITHUB_WORKSPACE}/file",
			expected: "''\"${GITHUB_WORKSPACE}\"'/file'",
		},
		{
			name:     "command with GITHUB_WORKSPACE at the end",
			input:    "path/to/${GITHUB_WORKSPACE}",
			expected: "'path/to/'\"${GITHUB_WORKSPACE}\"''",
		},
		{
			name:     "command with multiple GITHUB_WORKSPACE references",
			input:    "${GITHUB_WORKSPACE}/src:${GITHUB_WORKSPACE}/dst",
			expected: "''\"${GITHUB_WORKSPACE}\"'/src:'\"${GITHUB_WORKSPACE}\"'/dst'",
		},
		{
			name:     "command with GITHUB_WORKSPACE and single quote",
			input:    "it's in ${GITHUB_WORKSPACE}",
			expected: "'it'\\''s in '\"${GITHUB_WORKSPACE}\"''",
		},
		{
			name:     "complex docker command",
			input:    "docker run -v ${GITHUB_WORKSPACE}:${GITHUB_WORKSPACE}:rw image",
			expected: "'docker run -v '\"${GITHUB_WORKSPACE}\"':'\"${GITHUB_WORKSPACE}\"':rw image'",
		},
		{
			name:     "command with spaces and no variables",
			input:    "docker run hello world",
			expected: "'docker run hello world'",
		},
		{
			name:     "empty command",
			input:    "",
			expected: "",
		},
		{
			name:     "injection attempt in GITHUB_WORKSPACE context",
			input:    "${GITHUB_WORKSPACE}; rm -rf /",
			expected: "''\"${GITHUB_WORKSPACE}\"'; rm -rf /'",
		},
		{
			name:     "multiple different variables",