shell escape account name in cli command

2024-11-04 09:46:45 -06:00
parent e266945413
commit b4d395cec9
1 changed files with 1 additions and 1 deletions
--- a/lib/kamal/secrets/adapters/aws_secrets_manager.rb
+++ b/lib/kamal/secrets/adapters/aws_secrets_manager.rb
@@ -18,7 +18,7 @@ class Kamal::Secrets::Adapters::AwsSecretsManager < Kamal::Secrets::Adapters::Ba
    end

    def get_from_secrets_manager(secrets, account:)
-      `aws secretsmanager batch-get-secret-value --secret-id-list #{secrets.map(&:shellescape).join(" ")} --profile #{account}`.tap do
+      `aws secretsmanager batch-get-secret-value --secret-id-list #{secrets.map(&:shellescape).join(" ")} --profile #{account.shellescape}`.tap do
        raise RuntimeError, "Could not read #{secret} from AWS Secrets Manager" unless $?.success?
      end
    end