From: Steven Baltakatei Sandoval <baltakatei@gmail.com>
Date: Mon, 16 May 2022 17:51:19 +0000 (+0000)
Subject: feat(user/bk-find-git-verify):Add script to verify many git sigs
X-Git-Tag: 0.5.1~18
X-Git-Url: https://zdv2.bktei.com/gitweb/BK-2020-03.git/commitdiff_plain/24eabaf97cd8d1074f6ed96e09d706ae1b0e7a1a?hp=868a58fbadafd6ad2c10b70520ba6a64479f20ab

feat(user/bk-find-git-verify):Add script to verify many git sigs
---

diff --git a/user/bk-find-git-verify b/user/bk-find-git-verify
new file mode 100755
index 0000000..a94dc06
--- /dev/null
+++ b/user/bk-find-git-verify
@@ -0,0 +1,65 @@
+#!/usr/bin/env bash
+# Finds and verifies signatures of git repositories in specified dir
+# Usage: bk-find-git-verify [DIR]
+# Depends: GNU parallel 20210822, sort (GNU coreutils) 8.32
+# Version: 0.0.1
+
+# Define functions
+yell() { echo "$0: $*" >&2; } # print script path and all args to stderr
+die() { yell "$*"; exit 111; } # same as yell() but non-zero exit status
+try() { "$@" || die "cannot $*"; } # runs args as command, reports args if command fails
+git_verify_ops() {
+    # usage: git_verify_ops arg1
+    # input: arg1   git work tree root dir
+    # output: none
+    # depends: yell(), die(), try()
+    local list_tags;
+    
+    # Check input
+    ## End function early if arg1 not a dir
+    if [[ ! $# -eq 1 ]]; then yell "ERROR:Incorrect number of args:$#"; return 1; fi;
+    if [[ ! -d "$1" ]]; then yell "ERROR:Not a dir:$1"; return 1; fi;
+    ## TODO: Check if "$1" is git repo
+    yell "DEBUG:Running git_verify_ops on dir:$1";
+
+    # Change work dir to target repo
+    pushd "$1" 1>/dev/random 2>&1;
+
+    # Get list of git tags
+    list_tags="$(git tag --list)";
+    
+    # Verify git commit signatures
+    yell "Starting git log of dir:$1";
+    git log --show-signature 1>/dev/random 2>&1;
+    yell "Ending git log of dir:$1";
+
+    # Verify each tag
+    while read -r tag; do
+        yell "DEBUG:Verifying tag:$tag";
+        git verify-tag "$tag" 1>/dev/random 2>&1;
+    done < <(printf "%s" "$list_tags");
+
+    # Return to original work dir
+    popd 1>/dev/random 2>&1;
+
+    # End function;
+    return 0;
+}; # Verify signatures on git commits and tags
+main() {
+    # depends: yell(), die(), try()
+    # Check input
+    if [[ ! $# -eq 1 ]]; then die "FATAL:Incorrect arg count:$#"; fi;
+    if [[ ! -d "$1" ]]; then die "FATAL:Not a dir:$1"; fi;
+
+    # Get list of dirs containing '.git' directory
+    dir_list="$(find "$1" -type d -name ".git" 2>/dev/random | parallel dirname '{}' | sort -u)";
+
+    # Perform git verify operations on each directory
+    printf "%s" "$dir_list" | parallel git_verify_ops '{}';    
+}; # main program
+
+# Export functions
+export -f yell die try git_verify_ops
+
+# Run program
+main "$@";