From 73b8950d87619b2325247bc986fcfa105665c62f Mon Sep 17 00:00:00 2001
From: Ruoyu Zhong <zhongruoyu@outlook.com>
Date: Tue, 27 Aug 2024 18:22:54 +0800
Subject: [PATCH] workflows/docker: use safer delimiters

Co-authored-by: Carlo Cabrera <30379873+carlocab@users.noreply.github.com>
---
 .github/workflows/docker.yml | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 69f4683321..9212036ffe 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -40,8 +40,9 @@ jobs:
           date="$(date --rfc-3339=seconds --utc)"
           brew_version="$(git describe --tags --dirty --abbrev=7)"
 
+          DELIMITER="END_LABELS_$(LC_ALL=C tr -dc '[:alnum:]' </dev/urandom | head -c20)"
           cat <<EOS | tee -a "${GITHUB_OUTPUT}"
-          labels<<END_LABELS
+          labels<<${DELIMITER}
           org.opencontainers.image.created=${date}
           org.opencontainers.image.url=https://brew.sh
           org.opencontainers.image.documentation=https://docs.brew.sh
@@ -50,7 +51,7 @@ jobs:
           org.opencontainers.image.revision=${GITHUB_SHA}
           org.opencontainers.image.vendor=${GITHUB_REPOSITORY_OWNER}
           org.opencontainers.image.licenses=BSD-2-Clause
-          END_LABELS
+          ${DELIMITER}
           EOS
 
           tags=()
@@ -80,9 +81,10 @@ jobs:
 
           {
             if [[ "${#tags[@]}" -ne 0 ]]; then
-              echo "tags<<END_TAGS"
+              DELIMITER="END_TAGS_$(LC_ALL=C tr -dc '[:alnum:]' </dev/urandom | head -c20)"
+              echo "tags<<${DELIMITER}"
               printf "%s\n" "${tags[@]}"
-              echo "END_TAGS"
+              echo "${DELIMITER}"
               echo "push=true"
             else
               echo "push=false"