From 9504821a2225e5b8aa23cb8f6ea0023ac178fc06 Mon Sep 17 00:00:00 2001
From: Yuri Norwood <106889957+norwd@users.noreply.github.com>
Date: Mon, 7 Nov 2022 11:15:34 +1300
Subject: [PATCH] Quote bin path when `cd`ing into it to avoid shell globbing

Signed-off-by: Yuri Norwood <106889957+norwd@users.noreply.github.com>
---
 index.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/index.js b/index.js
index 8c24c19..117ac92 100644
--- a/index.js
+++ b/index.js
@@ -39,7 +39,7 @@ async function downloadRelease(octokit, os, org, repo, release, token) {
 
             // Extract the archive into the install target
             console.log("Unpacking archive file...")
-            execSync(`cd ${binpath} && ${extract} ${archive}`)
+            execSync(`cd "${binpath}" && ${extract} ${archive}`)
 
             // Remove the downloaded asset archive
             console.log("Removing asset archive...")