From 47d8122a7fde78b155a6c7e3f324e4403e6623cb Mon Sep 17 00:00:00 2001
From: "Alexander Nicholson 4584443+DragonStuff@users.noreply.github.com"
 <4584443+DragonStuff@users.noreply.github.com>
Date: Thu, 4 Sep 2025 13:08:48 +0200
Subject: [PATCH] fix: ensure manifest creation is quoted

---
 .github/workflows/publish-image.yml | 17 ++++++++++-------
 1 file changed, 10 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/publish-image.yml b/.github/workflows/publish-image.yml
index c9de0eb..022fe98 100644
--- a/.github/workflows/publish-image.yml
+++ b/.github/workflows/publish-image.yml
@@ -167,15 +167,18 @@ jobs:
           while IFS= read -r tag; do
             [ -z "$tag" ] && continue
             echo "Creating manifest for $tag"
-            ANNOTATION_ARG=""
             if [ -n "${IMAGE_DESCRIPTION:-}" ]; then
-              ANNOTATION_ARG="--annotation index:org.opencontainers.image.description=${IMAGE_DESCRIPTION}"
+              docker buildx imagetools create \
+                --tag "$tag" \
+                --annotation "index:org.opencontainers.image.description=${IMAGE_DESCRIPTION}" \
+                "${tag}-amd64" \
+                "${tag}-arm64"
+            else
+              docker buildx imagetools create \
+                --tag "$tag" \
+                "${tag}-amd64" \
+                "${tag}-arm64"
             fi
-            docker buildx imagetools create \
-              --tag "$tag" \
-              $ANNOTATION_ARG \
-              "${tag}-amd64" \
-              "${tag}-arm64"
           done <<< "$tags"
 
       - name: Install Cosign