pkgs/action-ensure-tea-login/script.sh

@@ -8,5 +8,5 @@ fi
 GITEA_TOKEN="${GITEA_TOKEN:-"$(cat "$GITEA_TOKEN_FILE")"}"
 
 tea login add \
-  --token $GITEA_TOKEN \
-  --url $GITEA_URL
+  --token "$GITEA_TOKEN" \
+  --url "$GITEA_URL"

pkgs/action-flake-update-pr-clan/script.sh

@@ -5,8 +5,10 @@ set -euo pipefail
 export KEEP_VARS="GIT_AUTHOR_NAME GIT_AUTHOR_EMAIL GIT_COMMITTER_NAME GIT_COMMITTER_EMAIL GITEA_URL GITEA_USER PR_TITLE REMOTE_BRANCH REPO_DIR${KEEP_VARS:+ $KEEP_VARS}"
 
 # configure variables for actions
-export PR_TITLE="Automatic flake update - $(date --iso-8601=minutes)"
-export REMOTE_BRANCH="flake-update-$(date --iso-8601)"
+PR_TITLE="Automatic flake update - $(date --iso-8601=minutes)"
+export PR_TITLE 
+REMOTE_BRANCH="flake-update-$(date --iso-8601)"
+export REMOTE_BRANCH
 export REPO_DIR=$TMPDIR/repo
 export GIT_AUTHOR_NAME="Clan Merge Bot"
 export GIT_AUTHOR_EMAIL="clan-bot@git.clan.lol"

targets/web01/decrypt.sh

@@ -1,6 +1,8 @@
 #!/usr/bin/env nix-shell
 #!nix-shell -i bash -p coreutils sops openssh
 
+# shellcheck disable=SC1008,SC1128
+
 set -euox pipefail
 
 HOST="clan.lol"

targets/web01/deploy.sh

@@ -1,6 +1,8 @@
 #!/usr/bin/env nix-shell
 #!nix-shell -i bash -p nix jq bash rsync
 
+# shellcheck disable=SC1008,SC1128
+
 set -euo pipefail
 
 clan machines update web01

terraform/web01/install.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env nix-shell
 #!nix-shell -i bash -p coreutils sops openssh nix
+
+# shellcheck disable=SC1008,SC1128
 set -euox pipefail
 
 if [[ -z "${HOST:-}" ]]; then

terraform/web01/nixosify.sh

@@ -1,5 +1,7 @@
 #!/bin/sh
 
+# shellcheck disable=SC1091
+
 set -eu
 
 installNix() {