ci: fix Command injection vulnerability

* Fix command injection vulnerability mentioned at https://hackerone.com/reports/3287280
* Fix a minor bug in weaver-deploy-node-pkgs.yaml
    where first time if publishing it might throw error

Signed-off-by: Sandeep Nishad <[email protected]>

Author: sandeepnRES

.github/workflows/test_weaver-pre-release.yaml

@@ -29,7 +29,7 @@ jobs:
           TITLE: ${{ github.event.pull_request.title }}
         run : |
           status="skip"
-          if echo ${TITLE} | grep -q "chore(release)"; then
+          if echo "${TITLE}" | grep -q "chore(release)"; then
             status="continue"
           fi
           echo "status=$status" >> $GITHUB_OUTPUT

.github/workflows/weaver_deploy_node-pkgs.yml

@@ -54,7 +54,7 @@ jobs:
       - name: Check if package already exists
         run : |
           PKG_NAME=$(node -p "require('./package.json').name")
-          PUBLISHED_VERSION=$(npm view $PKG_NAME version --workspaces=false)
+          PUBLISHED_VERSION=$(npm view $PKG_NAME version --workspaces=false || echo no.version.found)
           LOCAL_VERSION=$(node -p "require('./package.json').version")
           if [[ "$PUBLISHED_VERSION" == "$LOCAL_VERSION" ]]; then
             echo "PROTOS_JS_PUBLISH=false" >> $GITHUB_ENV
@@ -101,7 +101,7 @@ jobs:
       - name: Check if package already exists
         run : |
           PKG_NAME=$(node -p "require('./package.json').name")
-          PUBLISHED_VERSION=$(npm view $PKG_NAME version --workspaces=false)
+          PUBLISHED_VERSION=$(npm view $PKG_NAME version --workspaces=false || echo no.version.found)
           LOCAL_VERSION=$(node -p "require('./package.json').version")
           if [[ "$PUBLISHED_VERSION" == "$LOCAL_VERSION" ]]; then
             echo "WEAVER_FABRIC_SDK_PUBLISH=false" >> $GITHUB_ENV
@@ -146,7 +146,7 @@ jobs:
       - name: Check if package already exists
         run : |
           PKG_NAME=$(node -p "require('./package.json').name")
-          PUBLISHED_VERSION=$(npm view $PKG_NAME version --workspaces=false)
+          PUBLISHED_VERSION=$(npm view $PKG_NAME version --workspaces=false || echo no.version.found)
           LOCAL_VERSION=$(node -p "require('./package.json').version")
           if [[ "$PUBLISHED_VERSION" == "$LOCAL_VERSION" ]]; then
             echo "WEAVER_BESU_SDK_PUBLISH=false" >> $GITHUB_ENV

patch

@@ -0,0 +1,31 @@
+diff --git a/.github/workflows/weaver_deploy_node-pkgs.yml b/.github/workflows/weaver_deploy_node-pkgs.yml
+index d07fed4e2..fe8030c9b 100644
+--- a/.github/workflows/weaver_deploy_node-pkgs.yml
++++ b/.github/workflows/weaver_deploy_node-pkgs.yml
+@@ -54,7 +54,7 @@ jobs:
+       - name: Check if package already exists
+         run : |
+           PKG_NAME=$(node -p "require('./package.json').name")
+-          PUBLISHED_VERSION=$(npm view $PKG_NAME version --workspaces=false)
++          PUBLISHED_VERSION=$(npm view $PKG_NAME version --workspaces=false || echo no.version.found)
+           LOCAL_VERSION=$(node -p "require('./package.json').version")
+           if [[ "$PUBLISHED_VERSION" == "$LOCAL_VERSION" ]]; then
+             echo "PROTOS_JS_PUBLISH=false" >> $GITHUB_ENV
+@@ -101,7 +101,7 @@ jobs:
+       - name: Check if package already exists
+         run : |
+           PKG_NAME=$(node -p "require('./package.json').name")
+-          PUBLISHED_VERSION=$(npm view $PKG_NAME version --workspaces=false)
++          PUBLISHED_VERSION=$(npm view $PKG_NAME version --workspaces=false || echo no.version.found)
+           LOCAL_VERSION=$(node -p "require('./package.json').version")
+           if [[ "$PUBLISHED_VERSION" == "$LOCAL_VERSION" ]]; then
+             echo "WEAVER_FABRIC_SDK_PUBLISH=false" >> $GITHUB_ENV
+@@ -146,7 +146,7 @@ jobs:
+       - name: Check if package already exists
+         run : |
+           PKG_NAME=$(node -p "require('./package.json').name")
+-          PUBLISHED_VERSION=$(npm view $PKG_NAME version --workspaces=false)
++          PUBLISHED_VERSION=$(npm view $PKG_NAME version --workspaces=false || echo no.version.found)
+           LOCAL_VERSION=$(node -p "require('./package.json').version")
+           if [[ "$PUBLISHED_VERSION" == "$LOCAL_VERSION" ]]; then
+             echo "WEAVER_BESU_SDK_PUBLISH=false" >> $GITHUB_ENV