---
sourceDocument: Australia Build workflows
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/build-workflows

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Build workflows

ft:clusterId :

    - crworkflow

bundleId :

    - crworkflow

workflow :

    - Creator


---

# Sanitize shell arguments

# Sanitize shell arguments transform functions {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Use sanitize shell arguments transform functions to remove any potentially unsafe
command injections in String data pills to be used for Bash shell scripting.
Sanitize shell arguments transform functions require a String input data pill. Make sure to
use the correct input [data pill type](https://servicenow-prod.fluidtopics.net/Ct3dsJ0IiWIcbamXVRVy2g "Actions and subflows use variables to store input and output data. The variable data type determines what kind of data it stores and its advanced configuration options.") when
applying sanitize shell arguments transform functions. If a sanitize shell arguments
transform function is applied to an improper data type, the data is not transformed at
runtime and the input value is returned instead. For more information on confirming your
flow runtime values, see [Test a flow](https://servicenow-prod.fluidtopics.net/16GAKmUMqo2akmwgAuG1TA "Before activating a flow so other users can access it, test to make certain it works the way you expect.").  
Note:  
When a data pill is dropped into the Command input for an [SSH step](https://servicenow-prod.fluidtopics.net/g3DOS7ge7lQxdiN20WPokw "The SSH step executes SSH commands on an external *nix system through a ServiceNow MID Server. The step also stores scripts and commands for the *nix systems."), the sanitize shell arguments transform function category automatically appears.

## Sanitize Bash shell arguments {#sanitize-shell-arguments-transform-functions__section_fqg_5yh_kjb}

Returns a String free of any unsafe command injections in your Bash shell script. Wraps the
input String with single quotes and escapes any existing single quotes so that you can pass
the String directly to a shell function as a safe argument.  
{#sanitize-shell-arguments-transform-functions__table_rqj_2yx_lkb__entry__2}

| Input data pill | Output data pill |
|-|-|
| String | String - String with Bash shell arguments properly escaped |
[ ]

{#sanitize-shell-arguments-transform-functions__table_rqj_2yx_lkb}