Error in latest version (v1.3.0)

[jon-hall]

After an update to this action earlier today (v1.3.0) we started getting the following error in our builds:

+ install commenter-linux-amd64 /usr/local/bin/commenter
commenter-linux-amd64: OK
+ '[' -n /github/workspace ']'
+ cd /github/workspace
+ '[' -n '' ']'
+ TFSEC_FORMAT_OPTION=json
+ TFSEC_OUT_OPTION=results.json
+ '[' -n '' ']'
+ tfsec --out=results.json --format=json --soft-fail '' .
Usage:
  tfsec [directory] [flags]

...

Error: accepts between 0 and 1 arg(s), received 2

For now we've version locked to v1.2.0 which works fine.

[jon-hall]

The issue seems to be caused by an extra empty string argument ('') which is being supplied now (after --soft-fail in the build output above) - looking at passing builds on v1.2.0 there is no '' there.

Looks like this was recently modified here:

https://github.com/aquasecurity/tfsec-pr-commenter-action/blame/main/entrypoint.sh#L66

adding quotes around ${TFSEC_ARGS_OPTION}

[nhecker]

Pinning to v1.2.0 was a workaround for us as well.