Merge pull request #1261 from talentedmrjones/europa-secret-exec

Europa: secret exec

plan/task/secretexec.go

@@ -0,0 +1,45 @@
+package task
+
+import (
+	"context"
+	"os/exec"
+	"strings"
+
+	"github.com/rs/zerolog/log"
+	"go.dagger.io/dagger/compiler"
+	"go.dagger.io/dagger/plancontext"
+	"go.dagger.io/dagger/solver"
+)
+
+func init() {
+	Register("SecretExec", func() Task { return &secretExecTask{} })
+}
+
+type secretExecTask struct {
+}
+
+func (c secretExecTask) Run(ctx context.Context, pctx *plancontext.Context, _ solver.Solver, v *compiler.Value) (*compiler.Value, error) {
+	var secretExec struct {
+		Command struct {
+			Name string
+			Args []string
+		}
+	}
+
+	if err := v.Decode(&secretExec); err != nil {
+		return nil, err
+	}
+	lg := log.Ctx(ctx)
+
+	lg.Debug().Str("name", secretExec.Command.Name).Str("args", strings.Join(secretExec.Command.Args, " ")).Msg("executing secret command")
+
+	// sec audited by @aluzzardi and @mrjones
+	out, err := exec.CommandContext(ctx, secretExec.Command.Name, secretExec.Command.Args...).Output() //#nosec G204
+	if err != nil {
+		return nil, err
+	}
+	secret := pctx.Secrets.New(string(out))
+	return compiler.NewValue().FillFields(map[string]interface{}{
+		"contents": secret.MarshalCUE(),
+	})
+}