ci: prevent injection in presubmit (#66)

Author: averikitsch

.env

@@ -0,0 +1,6 @@
+CLOUD_SQL_POSTGRES_PROJECT=starter-akitsch
+CLOUD_SQL_POSTGRES_REGION=us-west2
+CLOUD_SQL_POSTGRES_INSTANCE=pg15-pgvector-demo
+CLOUD_SQL_POSTGRES_DATABASE=whoop
+CLOUD_SQL_POSTGRES_USER=postgres
+CLOUD_SQL_POSTGRES_PASSWORD=my-pg-pass

.github/workflows/presubmit-tests.yml

@@ -30,7 +30,7 @@ jobs:
       - name: Install toolbox binary
         run: |
           VERSION=$(cat toolbox_version.txt)
-          curl -L -o toolbox https://storage.googleapis.com/genai-toolbox/v$VERSION/linux/amd64/toolbox
+          curl -L -o toolbox "https://storage.googleapis.com/genai-toolbox/v${VERSION}/linux/amd64/toolbox"
           chmod +x toolbox
 
       - name: Install Extension