mirror of
https://github.com/trufflesecurity/trufflehog.git
synced 2024-11-10 07:04:24 +00:00
f4670aaab1
* Implemented gitlab inclusion globbing. Included test. * implemented two new flags for gitlab scan, includeRepo and excludeRepo to support globbing. Apply globbing filter when repos is not provided. * implemented integration test for inclusion globbing remove test to check errors if globs are invalid. * made changes to support glob compile errors. modified changes to support glob compilation errors. * removed unused context from few functions.
71 lines
1.8 KiB
Go
71 lines
1.8 KiB
Go
package engine
|
|
|
|
import (
|
|
"fmt"
|
|
"runtime"
|
|
|
|
gogit "github.com/go-git/go-git/v5"
|
|
"google.golang.org/protobuf/proto"
|
|
"google.golang.org/protobuf/types/known/anypb"
|
|
|
|
"github.com/trufflesecurity/trufflehog/v3/pkg/context"
|
|
"github.com/trufflesecurity/trufflehog/v3/pkg/pb/sourcespb"
|
|
"github.com/trufflesecurity/trufflehog/v3/pkg/sources"
|
|
"github.com/trufflesecurity/trufflehog/v3/pkg/sources/git"
|
|
"github.com/trufflesecurity/trufflehog/v3/pkg/sources/gitlab"
|
|
)
|
|
|
|
// ScanGitLab scans GitLab with the provided configuration.
|
|
func (e *Engine) ScanGitLab(ctx context.Context, c sources.GitlabConfig) error {
|
|
logOptions := &gogit.LogOptions{}
|
|
opts := []git.ScanOption{
|
|
git.ScanOptionFilter(c.Filter),
|
|
git.ScanOptionLogOptions(logOptions),
|
|
}
|
|
scanOptions := git.NewScanOptions(opts...)
|
|
|
|
connection := &sourcespb.GitLab{SkipBinaries: c.SkipBinaries}
|
|
|
|
switch {
|
|
case len(c.Token) > 0:
|
|
connection.Credential = &sourcespb.GitLab_Token{
|
|
Token: c.Token,
|
|
}
|
|
default:
|
|
return fmt.Errorf("must provide token")
|
|
}
|
|
|
|
if len(c.Endpoint) > 0 {
|
|
connection.Endpoint = c.Endpoint
|
|
}
|
|
|
|
if len(c.Repos) > 0 {
|
|
connection.Repositories = c.Repos
|
|
}
|
|
|
|
if len(c.IncludeRepos) > 0 {
|
|
connection.IncludeRepos = c.IncludeRepos
|
|
}
|
|
|
|
if len(c.ExcludeRepos) > 0 {
|
|
connection.IgnoreRepos = c.ExcludeRepos
|
|
}
|
|
|
|
var conn anypb.Any
|
|
err := anypb.MarshalFrom(&conn, connection, proto.MarshalOptions{})
|
|
if err != nil {
|
|
ctx.Logger().Error(err, "failed to marshal gitlab connection")
|
|
return err
|
|
}
|
|
|
|
sourceName := "trufflehog - gitlab"
|
|
sourceID, jobID, _ := e.sourceManager.GetIDs(ctx, sourceName, gitlab.SourceType)
|
|
|
|
gitlabSource := &gitlab.Source{}
|
|
if err := gitlabSource.Init(ctx, sourceName, jobID, sourceID, true, &conn, runtime.NumCPU()); err != nil {
|
|
return err
|
|
}
|
|
gitlabSource.WithScanOptions(scanOptions)
|
|
_, err = e.sourceManager.Run(ctx, sourceName, gitlabSource)
|
|
return err
|
|
}
|