removing remote user
This commit is contained in:
26
.devcontainer/.devpod-internal/1/README.md
Normal file
26
.devcontainer/.devpod-internal/1/README.md
Normal file
@@ -0,0 +1,26 @@
|
||||
|
||||
# tfsec (tfsec)
|
||||
|
||||
Install [tfsec](https://aquasecurity.github.io/tfsec/)
|
||||
|
||||
## Example Usage
|
||||
|
||||
```json
|
||||
"features": {
|
||||
"ghcr.io/dhoeric/features/tfsec:1": {
|
||||
"version": "latest"
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
## Options
|
||||
|
||||
| Options Id | Description | Type | Default Value |
|
||||
|-----|-----|-----|-----|
|
||||
| version | Select or enter tfsec version | string | latest |
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
_Note: This file was auto-generated from the [devcontainer-feature.json](https://github.com/dhoeric/features/blob/main/src/tfsec/devcontainer-feature.json). Add additional notes to a `NOTES.md`._
|
21
.devcontainer/.devpod-internal/1/devcontainer-feature.json
Normal file
21
.devcontainer/.devpod-internal/1/devcontainer-feature.json
Normal file
@@ -0,0 +1,21 @@
|
||||
{
|
||||
"name": "tfsec",
|
||||
"id": "tfsec",
|
||||
"version": "1.0.0",
|
||||
"description": "Install [tfsec](https://aquasecurity.github.io/tfsec/)",
|
||||
"documentationURL": "https://github.com/dhoeric/features/tree/main/src/tfsec",
|
||||
"options": {
|
||||
"version": {
|
||||
"type": "string",
|
||||
"proposal": [
|
||||
"latest",
|
||||
"1.28.1"
|
||||
],
|
||||
"default": "latest",
|
||||
"description": "Select or enter tfsec version"
|
||||
}
|
||||
},
|
||||
"installsAfter": [
|
||||
"ghcr.io/devcontainers/features/common-utils"
|
||||
]
|
||||
}
|
@@ -0,0 +1,30 @@
|
||||
#!/bin/sh
|
||||
set -e
|
||||
|
||||
on_exit () {
|
||||
[ $? -eq 0 ] && exit
|
||||
echo 'ERROR: Feature "tfsec" (ghcr.io/dhoeric/features/tfsec) failed to install! Look at the documentation at ${documentation} for help troubleshooting this error.'
|
||||
}
|
||||
|
||||
trap on_exit EXIT
|
||||
|
||||
set -a
|
||||
. ../devcontainer-features.builtin.env
|
||||
. ./devcontainer-features.env
|
||||
set +a
|
||||
|
||||
echo ===========================================================================
|
||||
|
||||
echo 'Feature : tfsec'
|
||||
echo 'Description : Install [tfsec](https://aquasecurity.github.io/tfsec/)'
|
||||
echo 'Id : ghcr.io/dhoeric/features/tfsec'
|
||||
echo 'Version : 1.0.0'
|
||||
echo 'Documentation : https://github.com/dhoeric/features/tree/main/src/tfsec'
|
||||
echo 'Options :'
|
||||
echo ' VERSION="latest"'
|
||||
echo 'Environment :'
|
||||
printenv
|
||||
echo ===========================================================================
|
||||
|
||||
chmod +x ./install.sh
|
||||
./install.sh
|
@@ -0,0 +1 @@
|
||||
VERSION="latest"
|
90
.devcontainer/.devpod-internal/1/install.sh
Normal file
90
.devcontainer/.devpod-internal/1/install.sh
Normal file
@@ -0,0 +1,90 @@
|
||||
#!/usr/bin/env bash
|
||||
|
||||
set -e
|
||||
|
||||
# Clean up
|
||||
rm -rf /var/lib/apt/lists/*
|
||||
|
||||
TFSEC_VERSION=${VERSION:-"latest"}
|
||||
|
||||
if [ "$(id -u)" -ne 0 ]; then
|
||||
echo -e 'Script must be run as root. Use sudo, su, or add "USER root" to your Dockerfile before running this script.'
|
||||
exit 1
|
||||
fi
|
||||
|
||||
apt_get_update()
|
||||
{
|
||||
echo "Running apt-get update..."
|
||||
apt-get update -y
|
||||
}
|
||||
|
||||
# Checks if packages are installed and installs them if not
|
||||
check_packages() {
|
||||
if ! dpkg -s "$@" > /dev/null 2>&1; then
|
||||
if [ "$(find /var/lib/apt/lists/* | wc -l)" = "0" ]; then
|
||||
apt_get_update
|
||||
fi
|
||||
apt-get -y install --no-install-recommends "$@"
|
||||
fi
|
||||
}
|
||||
|
||||
export DEBIAN_FRONTEND=noninteractive
|
||||
|
||||
# Figure out correct version of a three part version number is not passed
|
||||
find_version_from_git_tags() {
|
||||
local variable_name=$1
|
||||
local requested_version=${!variable_name}
|
||||
if [ "${requested_version}" = "none" ]; then return; fi
|
||||
local repository=$2
|
||||
local prefix=${3:-"tags/v"}
|
||||
local separator=${4:-"."}
|
||||
local last_part_optional=${5:-"false"}
|
||||
if [ "$(echo "${requested_version}" | grep -o "." | wc -l)" != "2" ]; then
|
||||
local escaped_separator=${separator//./\\.}
|
||||
local last_part
|
||||
if [ "${last_part_optional}" = "true" ]; then
|
||||
last_part="(${escaped_separator}[0-9]+)?"
|
||||
else
|
||||
last_part="${escaped_separator}[0-9]+"
|
||||
fi
|
||||
local regex="${prefix}\\K[0-9]+${escaped_separator}[0-9]+${last_part}$"
|
||||
local version_list="$(git ls-remote --tags ${repository} | grep -oP "${regex}" | tr -d ' ' | tr "${separator}" "." | sort -rV)"
|
||||
if [ "${requested_version}" = "latest" ] || [ "${requested_version}" = "current" ] || [ "${requested_version}" = "lts" ]; then
|
||||
declare -g ${variable_name}="$(echo "${version_list}" | head -n 1)"
|
||||
else
|
||||
set +e
|
||||
declare -g ${variable_name}="$(echo "${version_list}" | grep -E -m 1 "^${requested_version//./\\.}([\\.\\s]|$)")"
|
||||
set -e
|
||||
fi
|
||||
fi
|
||||
if [ -z "${!variable_name}" ] || ! echo "${version_list}" | grep "^${!variable_name//./\\.}$" > /dev/null 2>&1; then
|
||||
echo -e "Invalid ${variable_name} value: ${requested_version}\nValid values:\n${version_list}" >&2
|
||||
exit 1
|
||||
fi
|
||||
echo "${variable_name}=${!variable_name}"
|
||||
}
|
||||
|
||||
# Install dependencies
|
||||
check_packages curl git
|
||||
|
||||
architecture="$(uname -m)"
|
||||
case $architecture in
|
||||
x86_64) architecture="amd64";;
|
||||
aarch64 | armv8* | arm64) architecture="arm64";;
|
||||
*) echo "(!) Architecture $architecture unsupported"; exit 1 ;;
|
||||
esac
|
||||
|
||||
# Install tfsec
|
||||
echo "(*) Installing tfsec..."
|
||||
find_version_from_git_tags TFSEC_VERSION https://github.com/aquasecurity/tfsec
|
||||
|
||||
if [ "${TFSEC_VERSION::1}" != 'v' ]; then
|
||||
TFSEC_VERSION="v${TFSEC_VERSION}"
|
||||
fi
|
||||
curl -sSL -o /usr/local/bin/tfsec "https://github.com/aquasecurity/tfsec/releases/download/${TFSEC_VERSION}/tfsec-linux-${architecture}"
|
||||
chmod 0755 /usr/local/bin/tfsec
|
||||
|
||||
# Clean up
|
||||
rm -rf /var/lib/apt/lists/*
|
||||
|
||||
echo "Done!"
|
Reference in New Issue
Block a user