42767965538

# frozen_string_literal: true

require 'digest'

module Overcommit::HookLoader
  # Responsible for loading hooks that are specific to the repository Overcommit
  # is running in.
  class PluginHookLoader < Base
    def load_hooks
      check_for_unverified_plugins if @config.verify_signatures?

      hooks = plugin_paths.map do |plugin_path|
        require plugin_path

        hook_name = Overcommit::Utils.camel_case(File.basename(plugin_path, '.rb'))
        create_hook(hook_name)
      end

      hooks + ad_hoc_hook_names.map do |hook_name|
        create_ad_hoc_hook(hook_name)
      end
    end

    def update_signatures
      log.success('All plugin signatures have been verified') if unverified_plugins.empty?

      unverified_plugins.each do |plugin|
        plugin.update_signature!
        log.warning "Updated signature of plugin #{plugin.hook_name}"
      end
    end

    private

    def plugin_paths
      directory = File.join(@config.plugin_directory, @context.hook_type_name)
      Dir[File.join(directory, '*.rb')].sort
    end

    def plugin_hook_names
      plugin_paths.map do |path|
        Overcommit::Utils.camel_case(File.basename(path, '.rb'))
      end
    end

    def ad_hoc_hook_names
      @config.enabled_ad_hoc_hooks(@context)
    end

    def unverified_plugins
      (plugin_hook_names + ad_hoc_hook_names).
        map { |hook_name| Overcommit::HookSigner.new(hook_name, @config, @context) }.
        reject(&:signature_verified?)
    end

    def check_for_unverified_plugins
      return if unverified_plugins.empty?

      log.bold_warning "The following #{@context.hook_script_name} plugins " \
                       'have been added, changed, or had their configuration modified:'
      log.newline

      unverified_plugins.each do |signer|
        log.warning " * #{signer.hook_name} in #{signer.hook_path}"
      end

      log.newline
      log.bold_warning 'You should verify the changes and then run:'
      log.newline
      log.warning "overcommit --sign #{@context.hook_script_name}"
      log.newline
      log.log "For more information, see #{Overcommit::REPO_URL}#security"

      raise Overcommit::Exceptions::InvalidHookSignature
    end

    def create_ad_hoc_hook(hook_name)
      hook_module = Overcommit::Hook.const_get(@context.hook_class_name)
      hook_base = hook_module.const_get('Base')

      # Implement a simple class that executes the command and returns pass/fail
      # based on the exit status
      hook_class = Class.new(hook_base) do
        def run
          result = @context.execute_hook(command)

          if result.success?
            :pass
          else
            [:fail, result.stdout + result.stderr]
          end
        end
      end

      hook_module.const_set(hook_name, hook_class).new(@config, @context)
    rescue LoadError, NameError => e
      raise Overcommit::Exceptions::HookLoadError,
            "Unable to load hook '#{hook_name}': #{e}",
            e.backtrace
    end
  end
end

1	# frozen_string_literal: true
2
3	require 'digest'	84 ✔
4
5	module Overcommit::HookLoader	84 ✔
6	# Responsible for loading hooks that are specific to the repository Overcommit
7	# is running in.
8	class PluginHookLoader < Base	84 ✔
9	def load_hooks	84 ✔
10	check_for_unverified_plugins if @config.verify_signatures?	6 ✔
11
12	hooks = plugin_paths.map do \|plugin_path\|	6 ✔
13	require plugin_path	×
14
15	hook_name = Overcommit::Utils.camel_case(File.basename(plugin_path, '.rb'))	×
16	create_hook(hook_name)	×
17	end
18
19	hooks + ad_hoc_hook_names.map do \|hook_name\|	6 ✔
20	create_ad_hoc_hook(hook_name)	×
21	end
22	end
23
24	def update_signatures	84 ✔
NEW 25	log.success('All plugin signatures have been verified') if unverified_plugins.empty?	×
26
NEW 27	unverified_plugins.each do \|plugin\|	×
28	plugin.update_signature!	×
29	log.warning "Updated signature of plugin #{plugin.hook_name}"	×
30	end
31	end
32
33	private	84 ✔
34
35	def plugin_paths	84 ✔
36	directory = File.join(@config.plugin_directory, @context.hook_type_name)	6 ✔
37	Dir[File.join(directory, '*.rb')].sort	6 ✔
38	end
39
40	def plugin_hook_names	84 ✔
41	plugin_paths.map do \|path\|	×
42	Overcommit::Utils.camel_case(File.basename(path, '.rb'))	×
43	end
44	end
45
46	def ad_hoc_hook_names	84 ✔
47	@config.enabled_ad_hoc_hooks(@context)	6 ✔
48	end
49
50	def unverified_plugins	84 ✔
51	(plugin_hook_names + ad_hoc_hook_names).	×
52	map { \|hook_name\| Overcommit::HookSigner.new(hook_name, @config, @context) }.	×
53	reject(&:signature_verified?)
54	end
55
56	def check_for_unverified_plugins	84 ✔
NEW 57	return if unverified_plugins.empty?	×
58
59	log.bold_warning "The following #{@context.hook_script_name} plugins " \	×
60	'have been added, changed, or had their configuration modified:'
61	log.newline	×
62
NEW 63	unverified_plugins.each do \|signer\|	×
64	log.warning " * #{signer.hook_name} in #{signer.hook_path}"	×
65	end
66
67	log.newline	×
68	log.bold_warning 'You should verify the changes and then run:'	×
69	log.newline	×
70	log.warning "overcommit --sign #{@context.hook_script_name}"	×
71	log.newline	×
72	log.log "For more information, see #{Overcommit::REPO_URL}#security"	×
73
74	raise Overcommit::Exceptions::InvalidHookSignature	×
75	end
76
77	def create_ad_hoc_hook(hook_name)	84 ✔
78	hook_module = Overcommit::Hook.const_get(@context.hook_class_name)	×
79	hook_base = hook_module.const_get('Base')	×
80
81	# Implement a simple class that executes the command and returns pass/fail
82	# based on the exit status
83	hook_class = Class.new(hook_base) do	×
84	def run	×
85	result = @context.execute_hook(command)	×
86
87	if result.success?	×
88	:pass	×
89	else
90	[:fail, result.stdout + result.stderr]	×
91	end
92	end
93	end
94
95	hook_module.const_set(hook_name, hook_class).new(@config, @context)	×
96	rescue LoadError, NameError => e
97	raise Overcommit::Exceptions::HookLoadError,	×
98	"Unable to load hook '#{hook_name}': #{e}",
99	e.backtrace
100	end
101	end
102	end

sds / overcommit / 42767965538

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous