load-task: quote the command passed to echo (#726)

jcristau · web-flow · commit f8c4bfb16bdc · 2025-07-24T19:39:54.000+02:00
diff --git a/src/taskgraph/docker.py b/src/taskgraph/docker.py
@@ -350,9 +350,9 @@ def load_task(task_id, remove=True, user=None):
                 dedent(
                     f"""
             function exec-task() {{
-                echo "Starting task: {task_command}";
-                pushd {task_cwd};
-                {task_command};
+                echo Starting task: {shlex.quote(task_command)}
+                pushd {task_cwd}
+                {task_command}
                 popd
             }}
             """
