91 lines
2.4 KiB
JavaScript
91 lines
2.4 KiB
JavaScript
'use strict';
|
|
|
|
const { describe, test } = require('node:test');
|
|
const assert = require('node:assert/strict');
|
|
const fs = require('node:fs');
|
|
const path = require('node:path');
|
|
const { execFileSync } = require('node:child_process');
|
|
const { createTempDir, cleanup } = require('./helpers.cjs');
|
|
|
|
const ROOT = path.resolve(__dirname, '..');
|
|
const HOOK_PATH = path.join(ROOT, '.githooks', 'pre-push');
|
|
|
|
function writeExec(filePath, content) {
|
|
fs.writeFileSync(filePath, content, { mode: 0o755 });
|
|
}
|
|
|
|
describe('.githooks/pre-push enterprise email guard', () => {
|
|
test('blocks push when any to-be-pushed commit matches local blocked regex', (t) => {
|
|
const tmpDir = createTempDir('gsd-prepush-hook-');
|
|
t.after(() => cleanup(tmpDir));
|
|
|
|
const binDir = path.join(tmpDir, 'bin');
|
|
fs.mkdirSync(binDir, { recursive: true });
|
|
|
|
writeExec(path.join(binDir, 'git'), `#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
if [[ "$1" == "rev-list" ]]; then
|
|
echo "c1"
|
|
echo "c2"
|
|
exit 0
|
|
fi
|
|
if [[ "$1" == "show" ]]; then
|
|
commit="$(printf '%s\n' "$@" | tail -n 1)"
|
|
if [[ "$commit" == "c1" ]]; then
|
|
echo "trekkie@nomorestars.com"
|
|
else
|
|
echo "person@example-corp.com"
|
|
fi
|
|
exit 0
|
|
fi
|
|
exit 1
|
|
`);
|
|
|
|
assert.throws(() => {
|
|
execFileSync('bash', [HOOK_PATH], {
|
|
cwd: ROOT,
|
|
env: {
|
|
...process.env,
|
|
PATH: `${binDir}:${process.env.PATH}`,
|
|
GSD_BLOCKED_AUTHOR_REGEX: '@example-corp\\.com$',
|
|
},
|
|
input: 'refs/heads/pr refs-local-sha refs/heads/pr refs-remote-sha\n',
|
|
stdio: 'pipe',
|
|
});
|
|
}, /Push blocked: commit author email matched local blocked regex/);
|
|
});
|
|
|
|
test('allows push when to-be-pushed commits are non-enterprise emails', (t) => {
|
|
const tmpDir = createTempDir('gsd-prepush-hook-');
|
|
t.after(() => cleanup(tmpDir));
|
|
|
|
const binDir = path.join(tmpDir, 'bin');
|
|
fs.mkdirSync(binDir, { recursive: true });
|
|
|
|
writeExec(path.join(binDir, 'git'), `#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
if [[ "$1" == "rev-list" ]]; then
|
|
echo "c1"
|
|
echo "c2"
|
|
exit 0
|
|
fi
|
|
if [[ "$1" == "show" ]]; then
|
|
echo "trekkie@nomorestars.com"
|
|
exit 0
|
|
fi
|
|
exit 1
|
|
`);
|
|
|
|
execFileSync('bash', [HOOK_PATH], {
|
|
cwd: ROOT,
|
|
env: {
|
|
...process.env,
|
|
PATH: `${binDir}:${process.env.PATH}`,
|
|
GSD_BLOCKED_AUTHOR_REGEX: '@example-corp\\.com$',
|
|
},
|
|
input: 'refs/heads/pr refs-local-sha refs/heads/pr refs-remote-sha\n',
|
|
stdio: 'pipe',
|
|
});
|
|
});
|
|
});
|