Double quote variables in Dockerfile's shellscript, cc dependabot#3917

PeterDaveHelloKitchen · Jun 16, 2021 · 74e65e9 · 74e65e9
1 parent c7523c8
commit 74e65e9
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -56,8 +56,8 @@ RUN apt-get update \
 ARG USER_UID=1000
 ARG USER_GID=$USER_UID
 
-RUN if ! getent group $USER_GID; then groupadd --gid $USER_GID dependabot ; \
-     else GROUP_NAME=$(getent group $USER_GID | awk -F':' '{print $1}'); groupmod -n dependabot $GROUP_NAME ; fi \
+RUN if ! getent group "$USER_GID"; then groupadd --gid "$USER_GID" dependabot ; \
+     else GROUP_NAME=$(getent group $USER_GID | awk -F':' '{print $1}'); groupmod -n dependabot "$GROUP_NAME" ; fi \
   && useradd --uid "${USER_UID}" --gid "${USER_GID}" -m dependabot \
   && mkdir -p /opt && chown dependabot:dependabot /opt