V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

includes/initramfs-tools/files/unlock_wrapper.sh

@@ -101,7 +101,7 @@ gather_luks_devices() {
   declare -i tries=0
 
   while ((tries < 10)); do
-
+    # shellcheck disable=SC2312
     mapfile -t curr < <(blkid -t TYPE=crypto_LUKS -o device | sort)
 
     if cmp <(printf '%s\n' "${curr[@]}") <(printf '%s\n' "${prev[@]}") >/dev/null; then
@@ -299,7 +299,9 @@ trap_on_term() {
 #   0: Script Name
 #######################################
 verify_script() {
-  declare dir; dir="$(dirname "$(readlink -f "${0}")")"
+  declare dir
+  # shellcheck disable=SC2312
+  dir="$(dirname "$(readlink -f "${0}")")"
   declare script; script="$(basename "${0}")"
   declare -a algo=("sha512" "sha384")
   declare cmd="" computed="" expected="" hashfile="" item="" sigfile=""
@@ -359,6 +361,7 @@ main() {
   ### Read newline-separated output into an array.
   color_echo "${MAG}" "Scanning for LUKS devices ..."
   printf "%s" "${NL}"
+  # shellcheck disable=SC2312
   mapfile -t DEVICES_LUKS < <(gather_luks_devices)
 
   ### If there are no LUKS devices at all, drop to bash.

includes/initramfs-tools/files/unlock_wrapper_signer.sh

@@ -38,7 +38,7 @@ fi
 
 ### Extract fingerprint of the first secret key
 # shellcheck disable=SC2155
-declare -r FPR=$(gpg --homedir "$GNUPGHOME" --list-secret-keys --with-colons | awk -F: '/^fpr:/ { print $10; exit }')
+declare -r FPR=$(gpg --homedir "${GNUPGHOME}" --list-secret-keys --with-colons | awk -F: '/^fpr:/ { print $10; exit }')
 
 if [[ -z "${FPR}" ]]; then
   printf "\e[0;91m✘ Error: Could not extract fingerprint from keyring. \e[0m\n" >&2