ci(gh-actions): bash strict mode

Author: thomasleplus

.github/workflows/docker-build-push.yml

@@ -75,12 +75,11 @@ jobs:
         run: |
           set -euo pipefail
           IFS=$'\n\t'
-          images=""
+          images=()
           for tag in ${TAGS}; do
-            images+="${tag}@${DIGEST} "
+            images+=("${tag}@${DIGEST}")
           done
-          # shellcheck disable=SC2086
-          cosign sign --recursive --yes ${images}
+          cosign sign --recursive --yes "${images[@]}"
       - name: Set VERSION
         if: github.ref == 'refs/heads/main'
         shell: bash