fix(ci): fix githubactions:S7630 flagged by sonarcloud

Signed-off-by: Keith Wall <kwall@apache.org>

Author: k-wall

.github/workflows/robot-command-dispatcher.yaml

@@ -48,9 +48,11 @@ jobs:
           gh issue comment  ${{ github.event.issue.number }} --body "${{ github.actor }} is not entitled to use <code>&commat;kroxylicious-robot</code>. The user must be a member of release-engineers)"
           exit -1
 
-      - name: 'Extract command'
+      - name: 'Extract command from comment'
+        env:
+          COMMENT_BODY: ${{ github.event.comment.body }}
         run: |
-          COMMAND=$(echo "${{ github.event.comment.body }}" | awk '/^@kroxylicious-robot/ {print $2}')
+          COMMAND=$(echo "${COMMENT_BODY}" | awk '/^@kroxylicious-robot/ {print $2}')
           echo "COMMAND=${COMMAND}" >> $GITHUB_ENV
           case "${COMMAND}" in
             promote-release | drop-release)

.github/workflows/sonar.yaml

@@ -42,11 +42,13 @@ jobs:
           ref: ${{ github.event.workflow_run.head_branch }}
           fetch-depth: 0
       - name: Checkout base branch
+        env:
+          HEAD_BRANCH: ${{ github.event.workflow_run.head_branch }}
         run: |
           git remote add upstream ${{ github.event.repository.clone_url }}
           git fetch upstream
           git checkout -B ${{ fromJson(steps.get_pr_data.outputs.data).base.ref }} upstream/${{ fromJson(steps.get_pr_data.outputs.data).base.ref }}
-          git checkout ${{ github.event.workflow_run.head_branch }}
+          git checkout "${HEAD_BRANCH}"
           git clean -ffdx && git reset --hard HEAD
       - name: Set up QEMU
         uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392