ci: Rewrite Bash to check inputs to Python
What the developer wrote
Authored by MarcoFalke
ci: Rewrite Bash to check inputs to Python
This is shorter and easier to read. Also, according to the dev notes,
Bash should not be used.
What changed, and why it matters
This is a minor cleanup of a GitHub Actions workflow file. It rewrites a simple input-validation check from Bash to Python, with no functional change to what values are accepted or how the action behaves. There is no security issue visible in the change.
No action required. Treat as routine CI maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit changes the ‘Check inputs’ step in .github/actions/configure-docker/action.yml from shell: bash to shell: python. The logic remains identical: it warns if inputs.cache-provider is not one of ‘gha’ or ‘cirrus’. The diff is purely a language/style rewrite, not a security fix or behavior change. No injection vector is introduced or removed relative to the prior version; both versions interpolate the same GitHub Actions input into the script.
Changed components
.github/actions/configure-docker/action.ymlInspect captured patch +3 / −8
diff --git a/.github/actions/configure-docker/action.yml b/.github/actions/configure-docker/action.yml
index 814f2dd1..5c9531d3 100644
--- a/.github/actions/configure-docker/action.yml
+++ b/.github/actions/configure-docker/action.yml
@@ -8,16 +8,11 @@ runs:
using: 'composite'
steps:
- name: Check inputs
- shell: bash
+ shell: python
run: |
# We expect only gha or cirrus as inputs to cache-provider
- case "${{ inputs.cache-provider }}" in
- gha|cirrus)
- ;;
- *)
- echo "::warning title=Unknown input to configure docker action::Provided value was ${{ inputs.cache-provider }}"
- ;;
- esac
+ if "${{ inputs.cache-provider }}" not in ("gha", "cirrus"):
+ print("::warning title=Unknown input to configure docker action::Provided value was ${{ inputs.cache-provider }}")
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
Why this scored 16/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.