Try authenticated curl API calls for Cloudsmith

bin/curl-auth

@@ -0,0 +1,26 @@
+#!/bin/bash
+
+# Authenticate with GitHub using a token when calling the API via curl
+# Needed to get past rate limits with Cloudsmith GitHub action
+
+curl_wrapper() {
+  local args=("$@")
+  local url=""
+
+  # Find the URL argument
+  for arg in "${args[@]}"; do
+    if [[ "$arg" =~ ^https?:// ]]; then
+      url="$arg"
+      break
+    fi
+  done
+
+  # Check if URL is for api.github.com and GITHUB_TOKEN is set
+  if [[ -n "$GITHUB_TOKEN" && -n "$url" && "$url" =~ ^https?://api\.github\.com ]]; then
+    exec curl.real -H "Authorization: Bearer $GITHUB_TOKEN" "${args[@]}"
+  else
+    exec curl.real "${args[@]}"
+  fi
+}
+
+curl_wrapper "$@"

deb/Dockerfile.stable-slim

@@ -27,6 +27,13 @@ RUN echo downloading go${GO_INSTALL_VERSION} && \
 
 WORKDIR /packages
 
+# Add a wrapper script to authenticate curl requests when directed to GitHub API
+COPY bin/curl-auth /usr/local/bin/curl-auth
+RUN real_curl="$(which curl)" && \
+    mv "${real_curl}" "${real_curl}".real && \
+    mv /usr/local/bin/curl-auth "${real_curl}" && \
+    chmod +x "${real_curl}"
+
 # Our base image is Python, with entrypoint into a Python shell, so we need to override the entrypoint
 ENTRYPOINT []
 CMD ["/bin/bash"]

rpm/Dockerfile.ubi

@@ -24,3 +24,10 @@ RUN gem install --no-document fpm --ignore-dependencies -N
 
 
 WORKDIR /packages
+
+COPY bin/curl-auth /usr/local/bin/curl-auth
+RUN real_curl="$(which curl)" && \
+    mv "${real_curl}" "${real_curl}".real && \
+    mv /usr/local/bin/curl-auth "${real_curl}" && \
+    chmod +x "${real_curl}"
+