package task import ( "context" "os/exec" "strings" "github.com/rs/zerolog/log" "go.dagger.io/dagger/compiler" "go.dagger.io/dagger/plancontext" "go.dagger.io/dagger/solver" ) func init() { Register("SecretExec", func() Task { return &secretExecTask{} }) } type secretExecTask struct { } func (c secretExecTask) Run(ctx context.Context, pctx *plancontext.Context, _ solver.Solver, v *compiler.Value) (*compiler.Value, error) { var secretExec struct { Command struct { Name string Args []string } } if err := v.Decode(&secretExec); err != nil { return nil, err } lg := log.Ctx(ctx) lg.Debug().Str("name", secretExec.Command.Name).Str("args", strings.Join(secretExec.Command.Args, " ")).Msg("executing secret command") // sec audited by @aluzzardi and @mrjones out, err := exec.CommandContext(ctx, secretExec.Command.Name, secretExec.Command.Args...).Output() //#nosec G204 if err != nil { return nil, err } secret := pctx.Secrets.New(string(out)) return compiler.NewValue().FillFields(map[string]interface{}{ "contents": secret.MarshalCUE(), }) }