-
Notifications
You must be signed in to change notification settings - Fork 43
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add
mindev ruletype init
to kick off a rule type
This helps folks set up the basic skeleton for ruletype writing. Signed-off-by: Juan Antonio Osorio <[email protected]>
- Loading branch information
Showing
2 changed files
with
189 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,188 @@ | ||
// SPDX-FileCopyrightText: Copyright 2023 The Minder Authors | ||
// SPDX-License-Identifier: Apache-2.0 | ||
|
||
package rule_type | ||
|
||
import ( | ||
"errors" | ||
"fmt" | ||
"os" | ||
"path/filepath" | ||
"regexp" | ||
|
||
"github.com/spf13/cobra" | ||
) | ||
|
||
// CmdInit is the command for initializing a rule type definition | ||
func CmdInit() *cobra.Command { | ||
initCmd := &cobra.Command{ | ||
Use: "init", | ||
Short: "initialize a rule type definition", | ||
Long: `The 'ruletype init' subcommand allows you to initialize a rule type definition | ||
The first positional argument is the directory to initialize the rule type in. | ||
The rule type will be initialized in the current directory if no directory is provided. | ||
`, | ||
RunE: initCmdRun, | ||
SilenceUsage: true, | ||
} | ||
|
||
initCmd.Flags().StringP("name", "n", "", "name of the rule type") | ||
initCmd.Flags().BoolP("skip-tests", "s", false, "skip creating test files") | ||
|
||
if err := initCmd.MarkFlagRequired("name"); err != nil { | ||
fmt.Fprintf(os.Stderr, "Error marking flag as required: %s\n", err) | ||
os.Exit(1) | ||
} | ||
|
||
return initCmd | ||
} | ||
|
||
func initCmdRun(cmd *cobra.Command, args []string) error { | ||
name := cmd.Flag("name").Value.String() | ||
skipTests := cmd.Flag("skip-tests").Value.String() == "true" | ||
dir := "." | ||
if len(args) > 0 { | ||
dir = args[0] | ||
} | ||
|
||
if err := validateRuleTypeName(name); err != nil { | ||
return err | ||
} | ||
|
||
ruleTypeFileName := filepath.Join(dir, name+".yaml") | ||
ruleTypeTestFileName := filepath.Join(dir, name+".test.yaml") | ||
ruleTypeTestDataDirName := filepath.Join(dir, name+".testdata") | ||
|
||
if err := assertFilesDontExist( | ||
ruleTypeFileName, ruleTypeTestFileName, ruleTypeTestDataDirName); err != nil { | ||
return err | ||
} | ||
|
||
// Create rule type file | ||
if err := createRuleTypeFile(ruleTypeFileName, name); err != nil { | ||
return err | ||
} | ||
cmd.Printf("Created rule type file: %s\n", ruleTypeFileName) | ||
|
||
if !skipTests { | ||
// Create rule type test file | ||
if err := createRuleTypeTestFile(ruleTypeTestFileName); err != nil { | ||
return err | ||
} | ||
cmd.Printf("Created rule type test file: %s\n", ruleTypeTestFileName) | ||
|
||
// Create rule type test data directory | ||
if err := createRuleTypeTestDataDir(ruleTypeTestDataDirName); err != nil { | ||
return err | ||
} | ||
cmd.Printf("Created rule type test data directory: %s\n", ruleTypeTestDataDirName) | ||
} | ||
|
||
return nil | ||
} | ||
|
||
func validateRuleTypeName(name string) error { | ||
if name == "" { | ||
return errors.New("name cannot be empty") | ||
} | ||
|
||
validName := regexp.MustCompile(`^[a-zA-Z0-9_]+$`) | ||
|
||
// regexp to validate name | ||
if !validName.MatchString(name) { | ||
return errors.New("name must only contain alphanumeric characters and underscores") | ||
} | ||
|
||
return nil | ||
} | ||
|
||
func assertFilesDontExist(files ...string) error { | ||
for _, file := range files { | ||
if _, err := os.Stat(file); err == nil { | ||
|
||
return fmt.Errorf("file %s already exists", file) | ||
} | ||
} | ||
|
||
return nil | ||
} | ||
|
||
func createRuleTypeFile(fileName, name string) error { | ||
return createFileWithContent(fileName, fmt.Sprintf(`--- | ||
version: v1 | ||
release_phase: alpha | ||
type: rule-type | ||
name: %s | ||
display_name: # Display name for the rule type | ||
short_failure_message: # Short message to display when the rule fails | ||
severity: | ||
value: medium | ||
context: {} | ||
description: | # Description of the rule type | ||
guidance: | # Guidance for the rule type. This helps users understand how to fix the issue. | ||
def: | ||
in_entity: repository # The entity type the rule applies to | ||
rule_schema: {} | ||
ingest: | ||
type: git | ||
git: | ||
eval: | ||
type: rego | ||
rego: | ||
type: deny-by-default | ||
def: | | ||
package minder | ||
import rego.v1 | ||
default allow := false | ||
allow if { | ||
true | ||
} | ||
message := "This is a test message" | ||
`, name)) | ||
} | ||
|
||
func createRuleTypeTestFile(fileName string) error { | ||
return createFileWithContent(fileName, `--- | ||
tests: | ||
- name: "TEST NAME GOES HERE"" | ||
def: {} | ||
params: {} | ||
expect: "pass" | ||
entity: &test-repo | ||
type: repository | ||
entity: | ||
owner: "coolhead" | ||
name: "haze-wave" | ||
# http: | ||
# body_file: HTTP_BODY_FILE | ||
# git: | ||
# repo_base: REPO_BASE_PATH | ||
`) | ||
} | ||
|
||
func createRuleTypeTestDataDir(dirName string) error { | ||
if err := os.Mkdir(dirName, 0750); err != nil { | ||
return fmt.Errorf("error creating directory %s: %w", dirName, err) | ||
} | ||
|
||
return nil | ||
} | ||
|
||
func createFileWithContent(fileName, content string) error { | ||
file, err := os.Create(filepath.Clean(fileName)) | ||
if err != nil { | ||
return fmt.Errorf("error creating file %s: %w", fileName, err) | ||
} | ||
defer file.Close() | ||
|
||
if _, err := file.WriteString(content); err != nil { | ||
return fmt.Errorf("error writing to file %s: %w", fileName, err) | ||
} | ||
|
||
return nil | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters