From 39ead49eb4ed6130e00c08238e8c262c10530be2 Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Mon, 22 Sep 2025 15:23:26 +0200
Subject: [PATCH] ci: disable command execution in jobset generation

When GitLab PR descriptions contain markdown inline code blocks they get
interpreted as command substitutions in bash.

This is because the here-doc string previously allowed for this behavior.
---
 .hydra/declarative-jobsets.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.hydra/declarative-jobsets.nix b/.hydra/declarative-jobsets.nix
index 6877235..6f674b2 100644
--- a/.hydra/declarative-jobsets.nix
+++ b/.hydra/declarative-jobsets.nix
@@ -43,11 +43,11 @@ let
 in
 {
   jobsets = pkgs.runCommand "spec-jobsets.json" { } ''
-    cat >$out <<EOF
+    cat >$out <<'EOF'
     ${builtins.toJSON desc}
     EOF
     # This is to get nice .jobsets build logs on Hydra
-    cat >tmp <<EOF
+    cat >tmp <<'EOF'
     ${builtins.toJSON log}
     EOF
     ${pkgs.jq}/bin/jq . tmp