From 2233ac9b1d48fc6cbe5d98cbc0cbc89a2819f87c Mon Sep 17 00:00:00 2001
From: Simon Gardner <simg@users.noreply.github.com>
Date: Tue, 19 May 2026 16:58:40 +0100
Subject: [PATCH] Harden shell quoting in CI pipeline definitions (#33789)

GitOrigin-RevId: a21c02f632b1e357ba18a86378d796a0d93fa484
---
 server-ce/cloudbuild.public.yaml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/server-ce/cloudbuild.public.yaml b/server-ce/cloudbuild.public.yaml
index e7363da065..17a84a3c51 100644
--- a/server-ce/cloudbuild.public.yaml
+++ b/server-ce/cloudbuild.public.yaml
@@ -10,9 +10,9 @@ steps:
     script: |
       #!/usr/bin/env bash
       set -e
-      if [ ${BRANCH_NAME} == main ]; then
-        docker tag ${_IMAGE_BASE} ${_IMAGE_BASE_LATEST};
-        docker push ${_IMAGE_BASE_LATEST};
+      if [ "${BRANCH_NAME}" = "main" ]; then
+        docker tag "${_IMAGE_BASE}" "${_IMAGE_BASE_LATEST}";
+        docker push "${_IMAGE_BASE_LATEST}";
       fi
     automapSubstitutions: true
   - id: prefetch_ce
@@ -39,9 +39,9 @@ steps:
     script: |
       #!/usr/bin/env bash
       set -e
-      if [ $BRANCH_NAME == main ]; then
-        docker tag ${_IMAGE_TAG} ${_IMAGE_TAG_LATEST};
-        docker push ${_IMAGE_TAG_LATEST};
+      if [ "${BRANCH_NAME}" = "main" ]; then
+        docker tag "${_IMAGE_TAG}" "${_IMAGE_TAG_LATEST}";
+        docker push "${_IMAGE_TAG_LATEST}";
       fi
     automapSubstitutions: true
     waitFor: