forge
/
archive_hook.sh
Archived
1
0
Fork 0
Code Issues 4 Pull Requests Releases Wiki Activity

Allow forgehook group to read secrets in the db

This commit is contained in:
southerntofu 2020-04-28 18:23:13 +00:00
parent 358c69c305
commit 8fb1786c18
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
databases/unix
View File

@ -217,8 +217,9 @@ secret_cmd() {
fi
owner="$(cat $db/."$rhex".owner)"
if [[ "$owner" != "$user" ]]; then
# TODO: when running with group forgehook, we don't exit because it's an endpoint asking
db_owner="$(find /usr/local/bin/forgehook-db -maxdepth 0 -printf '%u')"
if [[ "$owner" != "$user" ]] && [[ "$(id -gn $SUDO_GID)" != "$db_owner" ]]; then
# TODO: when running with group forgehook, we don't exit because it's an endpoint asking (done?)
echo "ERROR: Repository $r is owned by $owner"
exit 1
fi