wrote a pipeline at work that went approximately thingctl blah list --json | jq -r '.items[] | @text "thingctl blah blah --bluh=\(.bluh) --ble=\(.blem)" | sh

[atax1a@infosec.exchange]

wrote a pipeline at work that went approximately thingctl blah list --json | jq -r '.items[] | @text "thingctl blah blah --bluh=\(.bluh) --ble=\(.blem)" | sh

[atax1a@infosec.exchange]

the | sh was considered spicy

[nabijaczleweli@101010.pl]

@atax1a turning my | shs into . <(s to evade suspicion... thats girl ma^Wprogramming

[atax1a@infosec.exchange]

@nabijaczleweli that would have been even more spooky to them

[wader@fosstodon.org]

@atax1a @nabijaczleweli tip: use @sh to shell escape while string interpolate:

$ jq -rn '"a b c" | @sh "hello \(.)"'
hello 'a b c'

[atax1a@infosec.exchange]

@wader unnecessary in this case due to the data we were handling

[atax1a@infosec.exchange]

we picked up this technique indirectly (possibly apocryphally) from larry wall via one of the system programmers at our university, a guy called schlake, who said that the best perl oneliner he'd ever seen was one in which larry wall did the same thing, and commented it "Bet ya weren't expecting that".