Clean up scripts

.github/workflows/ci.yml

@@ -24,7 +24,7 @@ env:
 
 defaults:
   run:
-    shell: bash
+    shell: bash --noprofile --norc -CeEuxo pipefail {0}
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
@@ -50,7 +50,7 @@ jobs:
             build_tool: cargo-zigbuild
           - os: macos-latest
           - os: macos-13 # x86_64
-          - os: macos-14 # aarch64
+          - os: macos-14 # AArch64
           - os: macos-latest
             target: x86_64-apple-darwin
           - os: macos-latest
@@ -90,23 +90,23 @@ jobs:
           codesign-options: 'runtime'
       - name: Check action outputs
         run: |
-          echo "outputs.archive should not be empty"
+          printf 'outputs.archive should not be empty\n'
           test -n "${{ steps.upload-rust-binary-action.outputs.archive }}"
 
-          echo "outputs.zip should be a file"
+          printf 'outputs.zip should be a file\n'
           test -f "${{ steps.upload-rust-binary-action.outputs.zip }}"
 
-          echo "outputs.tar should be a file"
+          printf 'outputs.tar should be a file\n'
           test -f "${{ steps.upload-rust-binary-action.outputs.tar }}"
 
-          echo "outputs.sha256 should be a file"
+          printf 'outputs.sha256 should be a file\n'
           test -f "${{ steps.upload-rust-binary-action.outputs.sha256 }}"
 
-          echo "outputs.sha512 should be a file"
+          printf 'outputs.sha512 should be a file\n'
           test -f "${{ steps.upload-rust-binary-action.outputs.sha512 }}"
 
-          echo "outputs.sha1 should be a file"
+          printf 'outputs.sha1 should be a file\n'
           test -f "${{ steps.upload-rust-binary-action.outputs.sha1 }}"
 
-          echo "outputs.md5 should be a file"
+          printf 'outputs.md5 should be a file\n'
           test -f "${{ steps.upload-rust-binary-action.outputs.md5 }}"

.github/workflows/release.yml

@@ -10,7 +10,7 @@ on:
 
 defaults:
   run:
-    shell: bash
+    shell: bash --noprofile --norc -CeEuxo pipefail {0}
 
 jobs:
   create-release:

.shellcheckrc

@@ -2,13 +2,34 @@
 # https://github.com/koalaman/shellcheck/blob/HEAD/shellcheck.1.md#rc-files
 
 # See also:
-# https://www.shellcheck.net/wiki/Optional
+# https://github.com/koalaman/shellcheck/wiki/Optional
 # https://google.github.io/styleguide/shellguide.html
 
-# https://www.shellcheck.net/wiki/SC2292
+# https://github.com/koalaman/shellcheck/wiki/SC2249
+# enable=add-default-case
+
+# https://github.com/koalaman/shellcheck/wiki/SC2244
+enable=avoid-nullary-conditions
+
+# https://github.com/koalaman/shellcheck/wiki/SC2312
+# enable=check-extra-masked-returns
+
+# https://github.com/koalaman/shellcheck/wiki/SC2310
+# https://github.com/koalaman/shellcheck/wiki/SC2311
+# enable=check-set-e-suppressed
+
+# enable=check-unassigned-uppercase
+
+# https://github.com/koalaman/shellcheck/wiki/SC2230
+enable=deprecate-which
+
+# https://github.com/koalaman/shellcheck/wiki/SC2248
+enable=quote-safe-variables
+
+# https://github.com/koalaman/shellcheck/wiki/SC2292
 # https://google.github.io/styleguide/shellguide.html#s6.3-tests
 enable=require-double-brackets
 
-# https://www.shellcheck.net/wiki/SC2250
+# https://github.com/koalaman/shellcheck/wiki/SC2250
 # https://google.github.io/styleguide/shellguide.html#s5.6-variable-expansion
 enable=require-variable-braces