fix(tflint-installer): Scope regex to avoid release json overmatches

[RoseSecurity]

Put an x into the box if that apply:

• This PR introduces breaking change.
• This PR fixes a bug.
• This PR adds new functionality.
• This PR enhances existing functionality.

Description of your changes

• It looks like the two most recent releases have failed to push Docker containers to the registry. After a little vibe-troubleshooting, this is what I have

• Fixes the Docker image build failure in /install/tflint.sh by narrowing the TFLint GitHub release URL regex. The previous https://.+?... pattern could overmatch GitHub API JSON and pass curl a malformed URL, causing exit code 3. The new https://[^\"]*... pattern stops at the JSON string boundary while still matching the linux amd64/arm64 TFLint zip assets.

How can we test changes

docker build \
    --build-arg INSTALL_ALL=true \
    --platform linux/amd64 \
    -t pre-commit-terraform:tflint-fix-test .

[coderabbitai]

📝 Walkthrough

Walkthrough

In tools/install/tflint.sh, the two GitHub release URL regex patterns (GH_RELEASE_REGEX_SPECIFIC_VERSION and GH_RELEASE_REGEX_LATEST) are updated to replace broad .+? matching with the stricter [^\"]* character class, preventing the patterns from matching across quoted URL boundaries.

Changes

tflint URL Regex Tightening

Layer / File(s)	Summary
Stricter URL regex patterns tools/install/tflint.sh	Both GH_RELEASE_REGEX_SPECIFIC_VERSION and GH_RELEASE_REGEX_LATEST replace https://.+?/-style matching with https://[^\"]*/ to restrict matches to within a quoted URL string.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description check	✅ Passed	The description clearly relates to the changeset, explaining the bug being fixed (overly broad regex causing Docker build failure) and the solution (narrowing the regex pattern).
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	The title directly addresses the main change: fixing an overly broad regex pattern in tflint.sh to prevent matching beyond JSON URL boundaries.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[MaxymVlasov]

Thank you for letting us know that it failed - it's hard to catch all these notifications nowadays.

Actually, it's just "regular" GH issues...
I retriggered 1.107.0 and it succeed.
https://github.com/antonbabenko/pre-commit-terraform/actions/runs/27772564891

Other one on the way