avoid GH macros in shell code 3

Author: vszakats

.github/workflows/build_latest_release_multi.yml

@@ -82,7 +82,9 @@ jobs:
         env:
           COSIGN_PASSWORD: ${{secrets.COSIGN_PASSWORD}}
       - name: Write public key to disk
-        run: echo "${{ secrets.COSIGN_PUBLIC_KEY }}" > cosign.pub
+        env:
+          COSIGN_PUBLIC_KEY: '${{ secrets.COSIGN_PUBLIC_KEY }}'
+        run: echo "${COSIGN_PUBLIC_KEY}" > cosign.pub
       - name: Verify image with public key
         run: |
           cosign verify --key cosign.pub ghcr.io/curl/curl-container/curl-multi:$REL

.github/workflows/build_master.yml

@@ -78,7 +78,9 @@ jobs:
         env:
           COSIGN_PASSWORD: ${{secrets.COSIGN_PASSWORD}}
       - name: Write public key to disk
-        run: echo "${{ secrets.COSIGN_PUBLIC_KEY }}" > cosign.pub
+        env:
+          COSIGN_PUBLIC_KEY: '${{ secrets.COSIGN_PUBLIC_KEY }}'
+        run: echo "${COSIGN_PUBLIC_KEY}" > cosign.pub
       - name: Verify image with public key
         run: |
           cosign verify --key cosign.pub ghcr.io/curl/curl-container/curl-dev:master

.github/workflows/build_master_dev.yml

@@ -73,7 +73,9 @@ jobs:
         env:
           COSIGN_PASSWORD: ${{secrets.COSIGN_PASSWORD}}
       - name: Write public key to disk
-        run: echo "${{ secrets.COSIGN_PUBLIC_KEY }}" > cosign.pub
+        env:
+          COSIGN_PUBLIC_KEY: '${{ secrets.COSIGN_PUBLIC_KEY }}'
+        run: echo "${COSIGN_PUBLIC_KEY}" > cosign.pub
       - name: Verify image with public key
         run: |
           cosign verify --key cosign.pub ghcr.io/curl/curl-container/curl-dev-debian:master

.github/workflows/build_master_multi.yml

@@ -76,7 +76,9 @@ jobs:
         env:
           COSIGN_PASSWORD: ${{secrets.COSIGN_PASSWORD}}
       - name: Write public key to disk
-        run: echo "${{ secrets.COSIGN_PUBLIC_KEY }}" > cosign.pub
+        env:
+          COSIGN_PUBLIC_KEY: '${{ secrets.COSIGN_PUBLIC_KEY }}'
+        run: echo "${COSIGN_PUBLIC_KEY}" > cosign.pub
       - name: Verify image with public key
         run: |
           cosign verify --key cosign.pub ghcr.io/curl/curl-container/curl-multi:master