Environment variables

[zonescape]

Is this intentional behavior or a bug?

Currently environment variables are eligible for shell parameter expansion. For example, this task gives string "xxxyyy":

task:
  - name: prints xxxyyy
    script: printenv FOO
    env: {BAR: yyy, FOO: xxx$BAR}

this one gives string "qwe":

task:
  - name: prints qwe
    script: printenv PASSWORD
    env: {PASSWORD: qwe$rty}

commands are also supported:

task:
  - name: prints xxx
    script: printenv FOO
    env: {FOO: $(echo xxx)}

Golang's %q encoding may produce unexpected behavior. This task escapes new line character:

task:
  - name: prints a\nb (new line is escaped)
    script: printenv FOO
    env: {FOO: "a\nb"}

this one escapes part of the emoji:

task:
  - name: prints 👨\u200d🦰
    script: printenv FOO
    env: {FOO: 👨‍🦰}