22 lines
1.9 KiB
Bash
22 lines
1.9 KiB
Bash
#!/bin/sh
|
|
set +vx
|
|
set -eu
|
|
test "$(id -u)" = 1000
|
|
test -d /data && test ! -L /data
|
|
test -d /data/security && test ! -L /data/security
|
|
test -d /data/security/receive-secret-scan && test ! -L /data/security/receive-secret-scan
|
|
test -d /data/security/receive-secret-scan/20261012-57a0642b6251 && test ! -L /data/security/receive-secret-scan/20261012-57a0642b6251
|
|
test -f /data/security/receive-secret-scan/20261012-57a0642b6251/receive-secret-scan && test ! -L /data/security/receive-secret-scan/20261012-57a0642b6251/receive-secret-scan
|
|
test "$(stat -c %u /data/security/receive-secret-scan/20261012-57a0642b6251/receive-secret-scan)" = 1000
|
|
test "$(sha256sum /data/security/receive-secret-scan/20261012-57a0642b6251/receive-secret-scan | cut -d " " -f 1)" = 57a0642b625105440fe146fceb4d244fd2dd08a75beb316831675643e6cc27ec
|
|
case "$(stat -c %a /data/security/receive-secret-scan/20261012-57a0642b6251/receive-secret-scan)" in 755|775) ;; *) exit 21;; esac
|
|
test -f /data/security/receive-secret-scan/20261012-57a0642b6251/gitleaks && test ! -L /data/security/receive-secret-scan/20261012-57a0642b6251/gitleaks
|
|
test "$(stat -c %u /data/security/receive-secret-scan/20261012-57a0642b6251/gitleaks)" = 1000
|
|
test "$(sha256sum /data/security/receive-secret-scan/20261012-57a0642b6251/gitleaks | cut -d " " -f 1)" = 88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509
|
|
case "$(stat -c %a /data/security/receive-secret-scan/20261012-57a0642b6251/gitleaks)" in 755|775) ;; *) exit 21;; esac
|
|
if [ "${1:-check}" = apply ]; then
|
|
chmod 755 /data/security/receive-secret-scan/20261012-57a0642b6251/receive-secret-scan
|
|
test "$(stat -c %a /data/security/receive-secret-scan/20261012-57a0642b6251/receive-secret-scan)" = 755
|
|
chmod 755 /data/security/receive-secret-scan/20261012-57a0642b6251/gitleaks
|
|
test "$(stat -c %a /data/security/receive-secret-scan/20261012-57a0642b6251/gitleaks)" = 755
|
|
fi
|