fix(HUM-2061): add shellcheck disable for intentionally unquoted ORAS_OPTIONS

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: scoheb

tasks/internal/filter-already-released-advisory-rpms-task/filter-already-released-advisory-rpms-task.yaml

@@ -194,11 +194,13 @@ spec:
 
           echo "Pushing filter results to OCI storage: ${OCI_REF}"
           ORAS_OPTS="--annotation=quay.expires-after=1d"
+          # shellcheck disable=SC2086 -- intentionally unquoted; empty quoted string breaks oras positional args
           (cd "$RESULTS_DIR" && oras push ${ORAS_OPTIONS:-} ${ORAS_OPTS} \
             --registry-config <(select-oci-auth "${OCI_STORAGE}") \
             "${OCI_REF}" "filter-results.tar.gz:application/gzip")
 
           # Get digest for the artifact reference
+          # shellcheck disable=SC2086 -- intentionally unquoted; empty quoted string breaks oras positional args
           DIGEST=$(oras manifest fetch ${ORAS_OPTIONS:-} "${OCI_REF}" \
             --registry-config <(select-oci-auth "${OCI_STORAGE}") \
             --descriptor | jq -r '.digest')
@@ -303,11 +305,13 @@ spec:
 
         echo "Pushing filter results to OCI storage: ${OCI_REF}"
         ORAS_OPTS="--annotation=quay.expires-after=1d"
+        # shellcheck disable=SC2086 -- intentionally unquoted; empty quoted string breaks oras positional args
         (cd "$RESULTS_DIR" && oras push ${ORAS_OPTIONS:-} ${ORAS_OPTS} \
           --registry-config <(select-oci-auth "${OCI_STORAGE}") \
           "${OCI_REF}" "filter-results.tar.gz:application/gzip")
 
         # Get digest for the artifact reference
+        # shellcheck disable=SC2086 -- intentionally unquoted; empty quoted string breaks oras positional args
         DIGEST=$(oras manifest fetch ${ORAS_OPTIONS:-} "${OCI_REF}" \
           --registry-config <(select-oci-auth "${OCI_STORAGE}") \
           --descriptor | jq -r '.digest')