forked from opensearch-project/opensearch-build
-
Notifications
You must be signed in to change notification settings - Fork 0
/
signer.py
61 lines (49 loc) · 2.21 KB
/
signer.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
#!/usr/bin/env python
# Copyright OpenSearch Contributors
# SPDX-License-Identifier: Apache-2.0
#
# The OpenSearch Contributors require contributions made to
# this file be licensed under the Apache-2.0 license or a
# compatible open source license.
import logging
import os
from abc import ABC, abstractmethod
from pathlib import Path
from typing import List
from git.git_repository import GitRepository
class Signer(ABC):
git_repo: GitRepository
overwrite: bool
def __init__(self, overwrite: bool) -> None:
self.overwrite = overwrite
self.git_repo = GitRepository(self.get_repo_url(), "HEAD", working_subdirectory="src")
self.git_repo.execute("./bootstrap")
self.git_repo.execute("rm config.cfg")
def sign_artifact(self, artifact: str, basepath: Path, signature_type: str) -> None:
if not self.is_valid_file_type(artifact):
logging.info(f"Skipping signing of file {artifact}")
return
self.generate_signature_and_verify(artifact, basepath, signature_type)
def sign_artifacts(self, artifacts: List[str], basepath: Path, signature_type: str) -> None:
for artifact in artifacts:
if not self.is_valid_file_type(artifact):
logging.info(f"Skipping signing of file {artifact}")
continue
self.generate_signature_and_verify(artifact, basepath, signature_type)
@abstractmethod
def generate_signature_and_verify(self, artifact: str, basepath: Path, signature_type: str) -> None:
pass
@abstractmethod
def is_valid_file_type(self, file_name: str) -> bool:
pass
def get_repo_url(self) -> str:
if "GITHUB_TOKEN" in os.environ:
return "https://${GITHUB_TOKEN}@github.com/opensearch-project/opensearch-signer-client.git"
return "https://github.com/opensearch-project/opensearch-signer-client.git"
def __remove_existing_signature__(self, signature_file: str) -> None:
if os.path.exists(signature_file):
logging.warning(f"Removing existing signature file {signature_file}")
os.remove(signature_file)
@abstractmethod
def sign(self, artifact: str, basepath: Path, signature_type: str) -> None:
pass