github actions: address PR feedback

Cleaning up some minor changes and makding checks a little safer.

Author: PlaidCat

.github/workflows/validate-kernel-commits-comment-secure.yml

@@ -144,7 +144,7 @@ jobs:
         run: |
           # Validate result files exist and are reasonable size
           if [ -f ckc_result.txt ]; then
-            FILE_SIZE=$(stat -f%z ckc_result.txt 2>/dev/null || stat -c%s ckc_result.txt 2>/dev/null)
+            FILE_SIZE=$(stat -c%s ckc_result.txt 2>/dev/null)
             if [ "$FILE_SIZE" -gt 1048576 ]; then  # 1MB limit
               echo "❌ Security: ckc_result.txt file too large: $FILE_SIZE bytes"
               exit 1
@@ -153,7 +153,7 @@ jobs:
           fi
 
           if [ -f interdiff_result.txt ]; then
-            FILE_SIZE=$(stat -f%z interdiff_result.txt 2>/dev/null || stat -c%s interdiff_result.txt 2>/dev/null)
+            FILE_SIZE=$(stat -c%s interdiff_result.txt 2>/dev/null)
             if [ "$FILE_SIZE" -gt 1048576 ]; then  # 1MB limit
               echo "❌ Security: interdiff_result.txt file too large: $FILE_SIZE bytes"
               exit 1
@@ -287,11 +287,13 @@ jobs:
 
           # Filter out any potential credential leaks from output
           # Use fixed string matching to avoid regex issues with special chars in tokens
-          FILTERED_OUTPUT=$(echo "$OUTPUT" | grep -v -F -e "jira-user" -e "jira-key" -e "basic_auth" -e "Authorization" -e "Bearer")
+          FILTERED_OUTPUT=$(echo "$OUTPUT" | grep -v -F -e "jira-user" -e "jira-key" -e "basic_auth" -e "Authorization" -e "Bearer" || true)
 
           # Additional safety: remove any lines that might contain the actual token
-          # Do this without putting the token in the command line
-          FILTERED_OUTPUT=$(echo "$FILTERED_OUTPUT" | grep -v "$JIRA_API_USER" || true)
+          # Do this without putting the token in the command linei
+          if [ -n "${JIRA_API_USER:-}" ] ; then
+            FILTERED_OUTPUT=$(echo "$FILTERED_OUTPUT" | grep -v "$JIRA_API_USER" || true)
+          fi
 
           echo "$FILTERED_OUTPUT"