Fix handling of lists in 'Set ECS categorization fields' scripts

[joegallo]

Defensively copy list parameters in 'Set ECS categorization fields' scripts. See elastic/elasticsearch#91977.

[joegallo]

These def hm = new HashMap(...) bits are trying to work around the linked bug, but I think they're mistaken.

[elastic-vault-github-plugin-prod]

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: c790dd5

History

• 💚 Build #19687 succeeded b8937ce

[elastic-sonarqube]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube

[elasticmachine]

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

[elasticmachine]

Pinging @elastic/sec-windows-platform (Team:Security-Windows Platform)

[elasticmachine]

Pinging @elastic/sec-deployment-and-devices (Team:Security-Deployment and Devices)

[andrewkroh]

@joegallo Is there any means of performing an automated escape analysis on these scripts? I'd love to be able to put a static check into our package test tooling.

[joegallo]

@joegallo Is there any means of performing an automated escape analysis on these scripts? I'd love to be able to put a static check into our package test tooling.

There's nothing built into Elasticsearch for that yet, but I'm going to think about it -- I realize that the current approach of 'just be careful/perfect all the time' is untenable.