From 583ae62c3bce87188ed4158c33b31aba06f6ec72 Mon Sep 17 00:00:00 2001
From: estebanthi <esteban.thilliez@gmail.com>
Date: Sun, 18 Jan 2026 11:25:34 +0100
Subject: [PATCH] validate images

---
 .github/workflows/docker-build-publish.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/workflows/docker-build-publish.yml b/.github/workflows/docker-build-publish.yml
index dc1e405..3af21c9 100644
--- a/.github/workflows/docker-build-publish.yml
+++ b/.github/workflows/docker-build-publish.yml
@@ -103,6 +103,15 @@ jobs:
         run: |
           set -euo pipefail
 
+          if ! echo "$IMAGES" | jq -e . >/dev/null; then
+            echo "inputs.images must be valid JSON" >&2
+            exit 1
+          fi
+          if ! echo "$IMAGES" | jq -e 'type == "array"' >/dev/null; then
+            echo "inputs.images must be a JSON array" >&2
+            exit 1
+          fi
+
           SSH_FLAGS=()
           if [ -n "${SSH_AUTH_SOCK:-}" ]; then
             SSH_FLAGS+=(--ssh default)