init

tasks/secret-extract-kaniko/task.yaml

@@ -75,13 +75,19 @@ spec:
           fi
         done
 
-        set -f  # disable globbing
+        set -f
         IFS=' ' read -r -a kanikoFlagArray <<< "$KANIKO_FLAGS"
         IFS=' ' read -r -a argumentKeyArray <<< "$ARGUMENT_KEYS"
         IFS=' ' read -r -a secretKeyArray <<< "$SECRET_KEYS"
 
+        len=${#kanikoFlagArray[@]}
+        if [ "$len" -ne "${#argumentKeyArray[@]}" ] || [ "$len" -ne "${#secretKeyArray[@]}" ]; then
+          echo "❌ Mismatched array lengths for flags, keys, or secrets."
+          exit 1
+        fi
+
         KANIKO_ARGS=""
-        for i in $(seq 0 $((${#kanikoFlagArray[@]} - 1))); do
+        for i in $(seq 0 $(($len - 1))); do
           kanikoFlag="${kanikoFlagArray[$i]}"
           argumentKey="${argumentKeyArray[$i]}"
           secretKey="${secretKeyArray[$i]}"
@@ -95,5 +101,6 @@ spec:
           KANIKO_ARGS="$KANIKO_ARGS $kanikoFlag $argumentKey=$secretValue"
         done
 
-        echo "✅ Final Kaniko args: $KANIKO_ARGS"
+        echo "✅ Final Kaniko args:"
+        echo "$KANIKO_ARGS"
         echo -n "$KANIKO_ARGS" > /tekton/results/kanikoArgs