From 499b3da410f92d58fed05e1a0cb68c3a20421b69 Mon Sep 17 00:00:00 2001
From: Craig Jennings <c@cjennings.net>
Date: Mon, 23 Feb 2026 06:06:55 -0600
Subject: chore: add set -euo pipefail to scripts for safety

Enable undefined variable checking (set -u) and pipefail across
standalone scripts. Guard SUDO_USER references with ${SUDO_USER:-}
for set -u compatibility.
---
 scripts/build-release | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'scripts/build-release')

diff --git a/scripts/build-release b/scripts/build-release
index 2fbf004..9c6614e 100755
--- a/scripts/build-release
+++ b/scripts/build-release
@@ -12,13 +12,13 @@
 #   - $ARCHSETUP_INBOX (notification for test VM rebuild, if set)
 #   - $DIST_REMOTE_HOST:$DIST_REMOTE_PATH (if set and reachable)
 
-set -e
+set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 PROJECT_DIR="$(dirname "$SCRIPT_DIR")"
 
 # Get actual user (not root when running with sudo)
-if [[ -n "$SUDO_USER" ]]; then
+if [[ -n "${SUDO_USER:-}" ]]; then
     REAL_USER="$SUDO_USER"
     REAL_HOME=$(getent passwd "$SUDO_USER" | cut -d: -f6)
 else
@@ -140,7 +140,7 @@ distribute_remote() {
 
     # Run SCP as the real user (not root) to use their SSH keys
     local scp_cmd="scp"
-    if [[ -n "$SUDO_USER" ]]; then
+    if [[ -n "${SUDO_USER:-}" ]]; then
         scp_cmd="sudo -u $SUDO_USER scp"
     fi
 
-- 
cgit v1.2.3