Fix shell quoting issues (SC2086) across workflows and engines

.github/workflows/copilot-session-insights.md

@@ -62,7 +62,7 @@ steps:
       # Check if gh CLI is available
       if ! command -v gh &> /dev/null; then
         echo "::error::GitHub CLI (gh) is not installed or not in PATH"
-        echo "SESSIONS_AVAILABLE=false" >> $GITHUB_OUTPUT
+        echo "SESSIONS_AVAILABLE=false" >> "$GITHUB_OUTPUT"
         exit 1
       fi
       echo "✓ GitHub CLI found: $(gh --version | head -1)"
@@ -72,7 +72,7 @@ steps:
         echo "::warning::gh agent-task extension is not installed"
         echo "::warning::To install: gh extension install github/agent-task"
         echo "::warning::This workflow requires GitHub Enterprise Copilot access"
-        echo "SESSIONS_AVAILABLE=false" >> $GITHUB_OUTPUT
+        echo "SESSIONS_AVAILABLE=false" >> "$GITHUB_OUTPUT"
         exit 1
       fi
       echo "✓ gh agent-task extension found"
@@ -82,7 +82,7 @@ steps:
         echo "::error::GH_TOKEN is not set"
         echo "::warning::Configure GH_AW_COPILOT_TOKEN secret with a Personal Access Token"
         echo "::warning::The default GITHUB_TOKEN does not have agent-task API access"
-        echo "SESSIONS_AVAILABLE=false" >> $GITHUB_OUTPUT
+        echo "SESSIONS_AVAILABLE=false" >> "$GITHUB_OUTPUT"
         exit 1
       fi
       echo "✓ GH_TOKEN is configured"
@@ -97,7 +97,7 @@ steps:
       if ! gh agent-task list --limit 50 --json number,title,state,createdAt,sessionId > /tmp/gh-aw/agent-sessions/sessions-list.json 2>&1; then
         echo "::error::Failed to list agent tasks"
         echo "::warning::This may indicate missing permissions or GitHub Enterprise Copilot is not enabled"
-        echo "SESSIONS_AVAILABLE=false" >> $GITHUB_OUTPUT
+        echo "SESSIONS_AVAILABLE=false" >> "$GITHUB_OUTPUT"
         exit 1
       fi
 
@@ -107,7 +107,7 @@ steps:
 
       if [ "$TOTAL_SESSIONS" -eq 0 ]; then
         echo "::warning::No sessions available for analysis"
-        echo "SESSIONS_AVAILABLE=false" >> $GITHUB_OUTPUT
+        echo "SESSIONS_AVAILABLE=false" >> "$GITHUB_OUTPUT"
         exit 0
       fi
 
@@ -124,7 +124,7 @@ steps:
       echo "Session logs downloaded to /tmp/gh-aw/agent-sessions/logs/"
       echo "Total log files: $LOG_COUNT"
 
-      echo "SESSIONS_AVAILABLE=true" >> $GITHUB_OUTPUT
+      echo "SESSIONS_AVAILABLE=true" >> "$GITHUB_OUTPUT"
       echo "::endgroup::"
 
   - name: Create fallback session data

.github/workflows/daily-perf-improver.md

@@ -45,9 +45,9 @@ steps:
     id: check_build_steps_file
     run: |
       if [ -f ".github/actions/daily-perf-improver/build-steps/action.yml" ]; then
-        echo "exists=true" >> $GITHUB_OUTPUT
+        echo "exists=true" >> "$GITHUB_OUTPUT"
       else
-        echo "exists=false" >> $GITHUB_OUTPUT
+        echo "exists=false" >> "$GITHUB_OUTPUT"
       fi
     shell: bash
   - name: Build the project ready for performance testing, logging to build-steps.log

.github/workflows/daily-test-improver.md

@@ -42,9 +42,9 @@ steps:
     id: check_coverage_steps_file
     run: |
       if [ -f ".github/actions/daily-test-improver/coverage-steps/action.yml" ]; then
-        echo "exists=true" >> $GITHUB_OUTPUT
+        echo "exists=true" >> "$GITHUB_OUTPUT"
       else
-        echo "exists=false" >> $GITHUB_OUTPUT
+        echo "exists=false" >> "$GITHUB_OUTPUT"
       fi
     shell: bash
   - name: Build the project and produce coverage report, logging to coverage-steps.log

.github/workflows/prompt-clustering-analysis.md

@@ -61,7 +61,7 @@ steps:
 
       # Search for PRs created by Copilot in the last 30 days
       echo "Fetching Copilot PRs from the last 30 days..."
-      gh search prs --repo ${{ github.repository }} \
+      gh search prs --repo "${{ github.repository }}" \
         --author "copilot" \
         --created ">=$DATE_30_DAYS_AGO" \
         --json number,title,state,createdAt,closedAt,author,body,labels,url,assignees,repository,mergedAt \
@@ -92,9 +92,9 @@ steps:
 
         # Download full PR data with all available fields
         gh pr view "$pr_number" \
-          --repo ${{ github.repository }} \
+          --repo "${{ github.repository }}" \
           --json additions,assignees,author,autoMergeRequest,baseRefName,baseRefOid,body,changedFiles,closed,closedAt,closingIssuesReferences,comments,commits,createdAt,deletions,files,fullDatabaseId,headRefName,headRefOid,headRepository,headRepositoryOwner,id,isCrossRepository,isDraft,labels,latestReviews,maintainerCanModify,mergeCommit,mergeStateStatus,mergeable,mergedAt,mergedBy,milestone,number,potentialMergeCommit,projectCards,projectItems,reactionGroups,reviewDecision,reviewRequests,reviews,state,statusCheckRollup,title,updatedAt,url \
-          > /tmp/gh-aw/prompt-cache/pr-full-data/pr-${pr_number}.json
+          > "/tmp/gh-aw/prompt-cache/pr-full-data/pr-${pr_number}.json"
 
         echo "Downloaded PR #$pr_number"
       done

.github/workflows/shared/ffmpeg.md

@@ -26,7 +26,7 @@ steps:
     run: |
       sudo apt-get update && sudo apt-get install -y ffmpeg
       version=$(ffmpeg -version | head -n1)
-      echo "version=$version" >> $GITHUB_OUTPUT
+      echo "version=$version" >> "$GITHUB_OUTPUT"
       mkdir -p /tmp/gh-aw/ffmpeg
 ---
 

.github/workflows/shared/genaiscript.md

@@ -40,7 +40,7 @@ engine:
 
     - name: Run GenAIScript
       id: genaiscript
-      run: genaiscript run /tmp/gh-aw/aw-prompts/prompt.genai.md --mcp-config $GH_AW_MCP_CONFIG --out /tmp/gh-aw/genaiscript-output.md
+      run: genaiscript run /tmp/gh-aw/aw-prompts/prompt.genai.md --mcp-config "$GH_AW_MCP_CONFIG" --out /tmp/gh-aw/genaiscript-output.md
       env:
         DEBUG: genaiscript:*
         GH_AW_PROMPT: ${{ env.GH_AW_PROMPT }}

.github/workflows/shared/opencode.md

@@ -7,7 +7,7 @@ engine:
   steps:
     - name: Install OpenCode and jq
       run: |
-        npm install -g opencode-ai@${GH_AW_AGENT_VERSION}
+        npm install -g "opencode-ai@${GH_AW_AGENT_VERSION}"
         sudo apt-get update && sudo apt-get install -y jq
       env:
         GH_AW_AGENT_VERSION: ${{ env.GH_AW_AGENT_VERSION }}