From a951daa76a6a3442949dca4ef13ae28394d4759c Mon Sep 17 00:00:00 2001
From: Advait Patel <advaitpatel@users.noreply.github.com>
Date: Fri, 22 May 2026 12:30:28 -0500
Subject: [PATCH] Apply suggested fix to entrypoint.sh from Copilot Autofix

Co-authored-by: Copilot Autofix powered by AI <223894421+github-code-quality[bot]@users.noreply.github.com>
---
 entrypoint.sh | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/entrypoint.sh b/entrypoint.sh
index 3fcbfcb..d19194a 100644
--- a/entrypoint.sh
+++ b/entrypoint.sh
@@ -12,31 +12,31 @@ export LLM_MODEL="${INPUT_LLM_MODEL}"
 # The inputs are passed as environment variables prefixed with INPUT_
 # e.g., inputs.dockerfile becomes INPUT_DOCKERFILE
 
-ARGS=""
+ARGS=()
 
 if [ -n "${INPUT_DOCKERFILE}" ]; then
-  ARGS="${INPUT_DOCKERFILE}"
+  ARGS+=("${INPUT_DOCKERFILE}")
 fi
 
 if [ -n "${INPUT_IMAGE}" ]; then
-  ARGS="${ARGS} -i ${INPUT_IMAGE}"
+  ARGS+=("-i" "${INPUT_IMAGE}")
 fi
 
 if [ -n "${INPUT_OUTPUT}" ]; then
-  ARGS="${ARGS} -o ${INPUT_OUTPUT}"
+  ARGS+=("-o" "${INPUT_OUTPUT}")
 fi
 
 if [ "${INPUT_AI_ONLY}" = "true" ]; then
-  ARGS="${ARGS} --ai-only"
+  ARGS+=("--ai-only")
 fi
 
 if [ "${INPUT_SCAN_ONLY}" = "true" ]; then
-  ARGS="${ARGS} --scan-only"
+  ARGS+=("--scan-only")
 fi
 
 if [ "${INPUT_IMAGE_ONLY}" = "true" ]; then
-  ARGS="${ARGS} --image-only"
+  ARGS+=("--image-only")
 fi
 
-echo "Running: docksec ${ARGS}"
-docksec ${ARGS}
+printf 'Running: docksec'; printf ' %q' "${ARGS[@]}"; printf '\n'
+docksec "${ARGS[@]}"