From: Steven Baltakatei Sandoval Date: Mon, 16 May 2022 17:51:19 +0000 (+0000) Subject: feat(user/bk-find-git-verify):Add script to verify many git sigs X-Git-Tag: 0.5.1~18 X-Git-Url: https://zdv2.bktei.com/gitweb/BK-2020-03.git/commitdiff_plain/24eabaf97cd8d1074f6ed96e09d706ae1b0e7a1a?hp=868a58fbadafd6ad2c10b70520ba6a64479f20ab feat(user/bk-find-git-verify):Add script to verify many git sigs --- diff --git a/user/bk-find-git-verify b/user/bk-find-git-verify new file mode 100755 index 0000000..a94dc06 --- /dev/null +++ b/user/bk-find-git-verify @@ -0,0 +1,65 @@ +#!/usr/bin/env bash +# Finds and verifies signatures of git repositories in specified dir +# Usage: bk-find-git-verify [DIR] +# Depends: GNU parallel 20210822, sort (GNU coreutils) 8.32 +# Version: 0.0.1 + +# Define functions +yell() { echo "$0: $*" >&2; } # print script path and all args to stderr +die() { yell "$*"; exit 111; } # same as yell() but non-zero exit status +try() { "$@" || die "cannot $*"; } # runs args as command, reports args if command fails +git_verify_ops() { + # usage: git_verify_ops arg1 + # input: arg1 git work tree root dir + # output: none + # depends: yell(), die(), try() + local list_tags; + + # Check input + ## End function early if arg1 not a dir + if [[ ! $# -eq 1 ]]; then yell "ERROR:Incorrect number of args:$#"; return 1; fi; + if [[ ! -d "$1" ]]; then yell "ERROR:Not a dir:$1"; return 1; fi; + ## TODO: Check if "$1" is git repo + yell "DEBUG:Running git_verify_ops on dir:$1"; + + # Change work dir to target repo + pushd "$1" 1>/dev/random 2>&1; + + # Get list of git tags + list_tags="$(git tag --list)"; + + # Verify git commit signatures + yell "Starting git log of dir:$1"; + git log --show-signature 1>/dev/random 2>&1; + yell "Ending git log of dir:$1"; + + # Verify each tag + while read -r tag; do + yell "DEBUG:Verifying tag:$tag"; + git verify-tag "$tag" 1>/dev/random 2>&1; + done < <(printf "%s" "$list_tags"); + + # Return to original work dir + popd 1>/dev/random 2>&1; + + # End function; + return 0; +}; # Verify signatures on git commits and tags +main() { + # depends: yell(), die(), try() + # Check input + if [[ ! $# -eq 1 ]]; then die "FATAL:Incorrect arg count:$#"; fi; + if [[ ! -d "$1" ]]; then die "FATAL:Not a dir:$1"; fi; + + # Get list of dirs containing '.git' directory + dir_list="$(find "$1" -type d -name ".git" 2>/dev/random | parallel dirname '{}' | sort -u)"; + + # Perform git verify operations on each directory + printf "%s" "$dir_list" | parallel git_verify_ops '{}'; +}; # main program + +# Export functions +export -f yell die try git_verify_ops + +# Run program +main "$@";