fix: addressed comments from @NickLarsenNZ

Author: dervoeti

publish-image/action.yml

@@ -110,8 +110,8 @@ runs:
         DIGEST=${IMAGE_REPO_DIGEST#*@}
 
         # URL encode the digest and image repository, needed for the purl
-        URLENCODED_DIGEST=$(echo "$DIGEST" | jq -Rr @uri)
-        URLENCODED_IMAGE_REPOSITORY=$(echo "$IMAGE_REPOSITORY" | jq -Rr @uri)
+        URLENCODED_DIGEST=$(jq -rn --arg input "$DIGEST" '$input | @uri')
+        URLENCODED_IMAGE_REPOSITORY=$(jq -rn --arg input "$IMAGE_REPOSITORY" '$input | @uri')
         # Last item, split by /
         # Example: sdp/kafka -> kafka
         SOURCE_NAME=$(echo "$IMAGE_REPOSITORY" | awk -F'/' '{print $NF}')
@@ -122,7 +122,7 @@ runs:
           exit 1
         fi
         # Construct the package url (purl)
-        PURL="pkg:oci/$SOURCE_NAME@$URLENCODED_DIGEST?arch=${ARCH}&repository_url=${REGISTRY_URI}%2F${URLENCODED_IMAGE_REPOSITORY}"
+        PURL="pkg:oci/{$SOURCE_NAME}@{$URLENCODED_DIGEST}?arch=${ARCH}&repository_url=${REGISTRY_URI}%2F${URLENCODED_IMAGE_REPOSITORY}"
 
         # Get metadata from the image
         # NOTE (@Techassi): Maybe we should run this command only once