Make early variables available for show and apply

Author: dflook

.github/workflows/test-version.yaml

@@ -611,7 +611,7 @@ jobs:
         run: |
           echo "The terraform version was $DETECTED_TERRAFORM_VERSION"
 
-          if [[ "$DETECTED_TERRAFORM_VERSION" != *"1.11"* ]]; then
+          if [[ "$DETECTED_TERRAFORM_VERSION" != *"1.12"* ]]; then
             echo "::error:: Latest version was not used"
             exit 1
           fi
@@ -632,7 +632,7 @@ jobs:
         run: |
           echo "The terraform version was $DETECTED_TERRAFORM_VERSION"
 
-          if [[ "$DETECTED_TERRAFORM_VERSION" != *"1.11"* ]]; then
+          if [[ "$DETECTED_TERRAFORM_VERSION" != *"1.12"* ]]; then
             echo "::error:: Latest version was not used"
             exit 1
           fi

.github/zizmor.yml

@@ -0,0 +1,5 @@
+rules:
+  unpinned-uses:
+    config:
+      policies:
+        dflook/terraform-apply: ref-pin

image/actions.sh

@@ -210,7 +210,7 @@ function init-test() {
 function set-init-args() {
     INIT_ARGS=""
 
-    if [[ -n "$INPUT_BACKEND_CONFIG_FILE" ]]; then
+    if [[ -n "${INPUT_BACKEND_CONFIG_FILE:-}" ]]; then
         for file in $(echo "$INPUT_BACKEND_CONFIG_FILE" | tr ',' '\n'); do
 
             if [[ ! -f "$file" ]]; then
@@ -222,7 +222,7 @@ function set-init-args() {
         done
     fi
 
-    if [[ -n "$INPUT_BACKEND_CONFIG" ]]; then
+    if [[ -n "${INPUT_BACKEND_CONFIG:-}" ]]; then
         for config in $(echo "$INPUT_BACKEND_CONFIG" | tr ',' '\n'); do
             INIT_ARGS="$INIT_ARGS -backend-config=$config"
         done