shell escape account name in cli command

basecamp · Nov 4, 2024 · b4d395c · b4d395c
1 parent e266945
commit b4d395c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/kamal/secrets/adapters/aws_secrets_manager.rb b/lib/kamal/secrets/adapters/aws_secrets_manager.rb
@@ -18,7 +18,7 @@ def fetch_secrets(secrets, account:, session:)
     end
 
     def get_from_secrets_manager(secrets, account:)
-      `aws secretsmanager batch-get-secret-value --secret-id-list #{secrets.map(&:shellescape).join(" ")} --profile #{account}`.tap do
+      `aws secretsmanager batch-get-secret-value --secret-id-list #{secrets.map(&:shellescape).join(" ")} --profile #{account.shellescape}`.tap do
         raise RuntimeError, "Could not read #{secret} from AWS Secrets Manager" unless $?.success?
       end
     end