71 lines
1.6 KiB
Go
71 lines
1.6 KiB
Go
package task
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"fmt"
|
|
"os"
|
|
"os/exec"
|
|
"strings"
|
|
|
|
"github.com/rs/zerolog/log"
|
|
"go.dagger.io/dagger/compiler"
|
|
"go.dagger.io/dagger/plancontext"
|
|
"go.dagger.io/dagger/solver"
|
|
)
|
|
|
|
func init() {
|
|
Register("InputSecretExec", func() Task { return &inputSecretExecTask{} })
|
|
}
|
|
|
|
type inputSecretExecTask struct {
|
|
}
|
|
|
|
func (c *inputSecretExecTask) Run(ctx context.Context, pctx *plancontext.Context, _ solver.Solver, v *compiler.Value) (*compiler.Value, error) {
|
|
var secretExec struct {
|
|
Command struct {
|
|
Name string
|
|
Args []string
|
|
}
|
|
TrimSpace bool
|
|
}
|
|
|
|
if err := v.Decode(&secretExec); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
lg := log.Ctx(ctx)
|
|
lg.Debug().Str("name", secretExec.Command.Name).Str("args", strings.Join(secretExec.Command.Args, " ")).Str("trimSpace", fmt.Sprintf("%t", secretExec.TrimSpace)).Msg("loading secret")
|
|
|
|
var err error
|
|
|
|
//#nosec G204: sec audited by @aluzzardi and @mrjones
|
|
cmd := exec.CommandContext(ctx, secretExec.Command.Name, secretExec.Command.Args...)
|
|
cmd.Env = os.Environ()
|
|
cmd.Dir, err = v.Lookup("command.name").Dirname()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
// sec audited by @aluzzardi and @mrjones
|
|
out, err := cmd.Output()
|
|
if err != nil {
|
|
var exitErr *exec.ExitError
|
|
if errors.As(err, &exitErr) {
|
|
lg.Err(err).Msg(string(exitErr.Stderr))
|
|
}
|
|
return nil, err
|
|
}
|
|
|
|
plaintext := string(out)
|
|
|
|
if secretExec.TrimSpace {
|
|
plaintext = strings.TrimSpace(plaintext)
|
|
}
|
|
|
|
secret := pctx.Secrets.New(plaintext)
|
|
return compiler.NewValue().FillFields(map[string]interface{}{
|
|
"contents": secret.MarshalCUE(),
|
|
})
|
|
}
|