mirror of
https://github.com/ivuorinen/actions.git
synced 2026-01-26 11:34:00 +00:00
87 lines
3.1 KiB
Python
Executable File
87 lines
3.1 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
"""Custom validator for pre-commit action."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from pathlib import Path
|
|
import sys
|
|
|
|
# Add validate-inputs directory to path to import validators
|
|
validate_inputs_path = Path(__file__).parent.parent / "validate-inputs"
|
|
sys.path.insert(0, str(validate_inputs_path))
|
|
|
|
from validators.base import BaseValidator
|
|
from validators.file import FileValidator
|
|
from validators.network import NetworkValidator
|
|
from validators.security import SecurityValidator
|
|
from validators.token import TokenValidator
|
|
|
|
|
|
class CustomValidator(BaseValidator):
|
|
"""Custom validator for pre-commit action."""
|
|
|
|
def __init__(self, action_type: str = "pre-commit") -> None:
|
|
"""Initialize pre-commit validator."""
|
|
super().__init__(action_type)
|
|
self.file_validator = FileValidator()
|
|
self.token_validator = TokenValidator()
|
|
self.network_validator = NetworkValidator()
|
|
self.security_validator = SecurityValidator()
|
|
|
|
def validate_inputs(self, inputs: dict[str, str]) -> bool:
|
|
"""Validate pre-commit action inputs."""
|
|
valid = True
|
|
|
|
# Validate pre-commit-config if provided
|
|
if "pre-commit-config" in inputs:
|
|
valid &= self.validate_with(
|
|
self.file_validator,
|
|
"validate_file_path",
|
|
inputs["pre-commit-config"],
|
|
"pre-commit-config",
|
|
)
|
|
|
|
# Validate base-branch if provided (just check for injection)
|
|
if inputs.get("base-branch"):
|
|
valid &= self.validate_with(
|
|
self.security_validator,
|
|
"validate_no_injection",
|
|
inputs["base-branch"],
|
|
"base-branch",
|
|
)
|
|
|
|
# Validate token if provided
|
|
if inputs.get("token"):
|
|
valid &= self.validate_with(
|
|
self.token_validator, "validate_github_token", inputs["token"]
|
|
)
|
|
|
|
# Validate commit_user if provided (allow spaces for Git usernames)
|
|
commit_user_key = self.get_key_variant(inputs, "commit_user", "commit-user")
|
|
if commit_user_key and inputs[commit_user_key]:
|
|
value = inputs[commit_user_key]
|
|
if any(c in value for c in [";", "&", "|", "`", "$", "(", ")", "\n", "\r"]):
|
|
self.add_error(f"{commit_user_key}: Contains potentially dangerous characters")
|
|
valid = False
|
|
|
|
# Validate commit_email if provided
|
|
commit_email_key = self.get_key_variant(inputs, "commit_email", "commit-email")
|
|
if commit_email_key and inputs[commit_email_key]:
|
|
valid &= self.validate_with(
|
|
self.network_validator,
|
|
"validate_email",
|
|
inputs[commit_email_key],
|
|
commit_email_key,
|
|
)
|
|
|
|
return valid
|
|
|
|
def get_required_inputs(self) -> list[str]:
|
|
"""Get list of required inputs."""
|
|
return []
|
|
|
|
def get_validation_rules(self) -> dict:
|
|
"""Get validation rules."""
|
|
rules_path = Path(__file__).parent / "rules.yml"
|
|
return self.load_rules(rules_path)
|