headlamp-plugin/scripts: Replace execSync with execFileSync

[skoeva]

These changes replace usage of execSync in the headlamp-plugin scripts with execFileSync.

Testing

• Run npm run fetch-official-plugins and npm run bundle-examples locally and ensure they work as expected

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: skoeva
Once this PR has been reviewed and has the lgtm label, please assign sniok for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[illume]

/assign copilot

[k8s-ci-robot]

@illume: GitHub didn't allow me to assign the following users: copilot.

Note that only kubernetes-sigs members with read permissions, repo collaborators and people who have commented on this issue/PR can be assigned. Additionally, issues/PRs can only have 10 assignees at the same time.
For more information please see the contributor guide

Details

In response to this:

/assign copilot

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[Copilot]

Pull request overview

This PR improves security by replacing execSync with execFileSync for git command execution in the headlamp-plugin scripts. The use of execFileSync prevents potential shell injection vulnerabilities by executing commands directly without shell interpretation.

Changes:

• Replaced all execSync calls with execFileSync in git utility scripts
• Converted shell command strings to properly separated argument arrays
• Maintained existing error handling and output processing logic

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
plugins/headlamp-plugin/scripts/git-hash-utils.js	Updated getLocalGitHash and getRemoteGitHash functions to use execFileSync with proper argument arrays
plugins/headlamp-plugin/scripts/fetch-official-plugins.js	Replaced git clone and rev-parse commands to use execFileSync with array-based arguments

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.