magic_rb/dotfiles
1
0
Fork 0
mirror of https://git.sr.ht/~magic_rb/dotfiles synced 2024-11-25 09:36:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

Disable ip-search pre-commit hook

Browse source 
Signed-off-by: magic_rb <magic_rb@redalder.org>
This commit is contained in:
magic_rb 2024-07-13 21:00:36 +02:00
parent e055a1535e
commit ecc01a1135
No known key found for this signature in database
GPG key ID: 08D5287CC5DDCA0E
1 changed files with 14 additions and 59 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

73
checks/pre-commit/default.nix
View file

@ -9,69 +9,11 @@
(lib)
mkIf
elem
getExe
pipe
concatStringsSep
makeBinPath
;
supportedSystems = [
"x86_64-linux"
"aarch64-linux"
];
ipv4Allowed =
pipe [
"127.0.0.1"
"8.8.8.8"
"64.225.104.221"
"93.184.77.2"
"67.207.67.3"
"64.225.96.1"
"5.5.5.5"
"255.255.255.255"
"2.9.0.1"
"127.0.0.0"
] [
(concatStringsSep "\n")
(pkgs.writeText "allowed_ipv4.txt")
];
ip-search = pkgs.writeShellScriptBin "ip-search" ''
export PATH="${makeBinPath [pkgs.ripgrep]}:$PATH"
_ipv4_regex='((25[0-5]|(2[0-4]|1\d|[1-9]|)\d)\.){3}(25[0-5]|(2[0-4]|1\d|[1-9]|)\d)'
_ipv4_matches=()
mapfile -t _ipv4_matches < <( rg "$_ipv4_regex" . -oNI | sort | uniq )
_ipv6_regex='a'
_ipv6_matches=()
# TODO
_ipv4_allowed=()
mapfile -t _ipv4_allowed < ${ipv4Allowed}
_ipv4_offending=()
mapfile -t _ipv4_offending < <( diff -U 1 \
<( echo ''${_ipv4_matches[@]} | tr ' ' '\n' | sort | uniq -u ) \
<( echo ''${_ipv4_allowed[@]} | tr ' ' '\n' | sort | uniq -u ) \
| grep '^-' \
| cut -b 2- \
| tail +2 )
for _offending in ''${_ipv4_offending[@]} ; do
echo "found offending ipv4 address $_offending in file(s):"
mapfile -t _files < <( rg -FoN "$_offending" . | cut -f 1 -d : | sort | uniq )
for _file in ''${_files[@]} ; do
echo $' - '"$_file"
done
done
echo "Found ''${#_ipv4_offending[@]} offending ipv4 addresses"
exit 69
'';
in
mkIf (elem system supportedSystems) (inputs.pre-commit-hooks.lib.${system}.run {
imports = [
@ -91,7 +33,20 @@ in
# statix.enable = true;
ip-search = {
enable = true;
permittedIpv4Addresses = [
"127.0.0.1"
"8.8.8.8"
"64.225.104.221"
"93.184.77.2"
"67.207.67.3"
"64.225.96.1"
"5.5.5.5"
"255.255.255.255"
"2.9.0.1"
"127.0.0.0"
];
## disable for now
enable = false;
};
};
})