gentoo: comply with CodeQl

Signed-off-by: Paymon MARANDI <darwinskernel@gmail.com>

diff --git a/mkosi/distributions/gentoo.py b/mkosi/distributions/gentoo.py
index 8e0682d07b525488ea23b410193092ae0b2368e3..d7ed02ed0f368fde8281460420715d0bae881b40 100644 (file)
--- a/mkosi/distributions/gentoo.py
+++ b/mkosi/distributions/gentoo.py
@@ -32,9 +32,10 @@ def invoke_emerge(
     env: dict[str, str] = {},
 ) -> None:
     jobs = os.cpu_count() or 1
+    bwrap: list[PathString] = []
     if sysroot is not None:
         target_root_mntp = "/tmp/mkosi-root"
-        bwrap_params += ["--bind", state.root, target_root_mntp]
+        bwrap += ["--bind", state.root, target_root_mntp]
         root = Path(target_root_mntp)
     else:
         sysroot = state.root
@@ -54,13 +55,14 @@ def invoke_emerge(
     else:
         emerge_default_opts += ["--quiet-build", "--quiet"]
     cmd = ["emerge", *pkgs, *emerge_default_opts, *opts, *actions]
-    bwrap_params += [
+    bwrap += [
         "--bind", state.cache / "binpkgs", "/var/cache/binpkgs",
         "--bind", state.cache / "distfiles", "/var/cache/distfiles",
         "--bind", state.cache / "repos", "/var/db/repos",
+        *bwrap_params
     ]
-    run_workspace_command(sysroot, cmd, bwrap_params=bwrap_params,
-                          network=True, env=env)
+    run_workspace_command(sysroot, cmd, bwrap_params=bwrap, network=True,
+                          env=env)
 
 
 @dataclass