oidc-test 0.8.1 → 0.8.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2eac8d8155ff380dc832c90cd58d03d5a26a85e844cbd7646bd3609e5299a153
-  data.tar.gz: e7b4f217c4233dece06f4c9f7850ce322b67a07de437758931bf542890536305
+  metadata.gz: 04f405f2eab5a94aa9178413897d87911dacdfa138c67ba3316fc6c6a24bd152
+  data.tar.gz: b1a9417381fd097c046b07d68ee11a4e3c9a8c9b7edb27ff586fa6ae4b65a062
 SHA512:
-  metadata.gz: 6214ebffb0e958630e998be535847ea9371ebd59f20062b79a952af73ad658cdc22eed967390d0cd98ad791aebb933cc7ac8890a2494001e413313f719b71742
-  data.tar.gz: 4efd351f3b31dbbc2927d8167529ace1be3657e050c041c53f912273603b0f8604784f5147a5d616e7a528904d0027405337b7d701c6b3905465d3dd1143ae75
+  metadata.gz: 14e5d54d31e99764e6e3685b4b221a601df88dd597467a8920a6089407294a042a5a3c4dece640e9f4881f469b807309ab2564136a899438b855b3a01786a758
+  data.tar.gz: c9b2b662e5a783f42337e6bc62e93b25a61a10aa0b862d70b733547fc4f51829a4378ad2b320f4d0d556e4d2a308c9341ed4569900f7d918dd1436dd72be6be0

data/.rubocop.yml

@@ -1,5 +1,5 @@
 AllCops:
-  TargetRubyVersion: 2.6
+  TargetRubyVersion: 3.1
 
 Style/StringLiterals:
   Enabled: true
@@ -11,3 +11,9 @@ Style/StringLiteralsInInterpolation:
 
 Layout/LineLength:
   Max: 120
+
+Style/Documentation:
+  Enabled: false
+
+Metrics:
+  Enabled: false

data/Gemfile

@@ -10,3 +10,7 @@ gem "rake", "~> 13.0"
 gem "rspec", "~> 3.0"
 
 gem "rubocop", "~> 1.21"
+
+gem "racc"
+
+gem "sigstore", "~> 0.1.1"

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    oidc-test (0.8.1)
+    oidc-test (0.8.2)
 
 GEM
   remote: https://rubygems.org/
@@ -9,9 +9,22 @@ GEM
     ast (2.4.2)
     diff-lcs (1.5.0)
     json (2.6.3)
+    net-http (0.5.0)
+      uri
     parallel (1.22.1)
     parser (3.2.2.0)
       ast (~> 2.4.1)
+    protobug (0.1.0)
+    protobug_googleapis_field_behavior_protos (0.1.0)
+      protobug (= 0.1.0)
+      protobug_well_known_protos (= 0.1.0)
+    protobug_sigstore_protos (0.1.0)
+      protobug (= 0.1.0)
+      protobug_googleapis_field_behavior_protos (= 0.1.0)
+      protobug_well_known_protos (= 0.1.0)
+    protobug_well_known_protos (0.1.0)
+      protobug (= 0.1.0)
+    racc (1.8.1)
     rainbow (3.1.1)
     rake (13.0.6)
     regexp_parser (2.7.0)
@@ -42,16 +55,23 @@ GEM
     rubocop-ast (1.28.0)
       parser (>= 3.2.1.0)
     ruby-progressbar (1.13.0)
+    sigstore (0.1.1)
+      net-http
+      protobug_sigstore_protos (~> 0.1.0)
+      uri
     unicode-display_width (2.4.2)
+    uri (1.0.2)
 
 PLATFORMS
   ruby
 
 DEPENDENCIES
   oidc-test!
+  racc
   rake (~> 13.0)
   rspec (~> 3.0)
   rubocop (~> 1.21)
+  sigstore (~> 0.1.1)
 
 BUNDLED WITH
    2.5.10

data/Rakefile

@@ -1,5 +1,63 @@
 # frozen_string_literal: true
 
+require "bundler/gem_helper"
+
+module Bundler
+  class GemHelper
+    prepend(Module.new do
+      def install
+        super
+
+        namespace :release do
+          task attest: :build do
+            attest if attest?
+          end
+
+          task rubygem_push: :attest
+        end
+      end
+
+      def build_gem
+        @build_gem_path = super
+      end
+
+      def rubygem_push(path)
+        return super unless attest?
+
+        cmd = [{ "RUBYOPT" => "-r#{File.expand_path("tasks/rubygems_patch.rb", __dir__)} #{ENV["RUBYOPT"]}",
+                 "gem_attestation_path" => "#{path}.sigstore.json" }, *gem_command, "push", path]
+        cmd << "--key" << gem_key if gem_key
+        cmd << "--host" << gem_push_host if gem_push_host
+        sh_with_input(cmd)
+        Bundler.ui.confirm "Pushed #{name} #{version} to #{gem_push_host}"
+      end
+    end)
+
+    def attest?
+      return true if %w[y yes true on 1].include?(ENV["gem_attest"])
+      return false if %w[n no nil false off 0].include?(ENV["gem_attest"])
+
+      ENV["ACTIONS_ID_TOKEN_REQUEST_URL"] && ENV["ACTIONS_ID_TOKEN_REQUEST_TOKEN"]
+    end
+
+    def attest
+      ruby "-rnet/http", "-rsigstore/signer", "-e", <<~RUBY
+        file = @build_gem_path
+        jwt = Net::HTTP.get_response(
+          URI(ENV.fetch("ACTIONS_ID_TOKEN_REQUEST_URL") + "&audience=sigstore"),
+          { "Authorization" => "bearer #{ENV.fetch("ACTIONS_ID_TOKEN_REQUEST_TOKEN")}" },
+          &:value
+        ).body.then { JSON.parse(_1).fetch("value") }
+
+        contents = File.binread(file)
+        bundle = Sigstore::Signer.new(jwt:, trusted_root: Sigstore::TrustedRoot.production).sign(contents)
+
+        File.binwrite("#{file}.sigstore.json", bundle.to_json)
+      RUBY
+    end
+  end
+end
+
 require "bundler/gem_tasks"
 
 Bundler::GemHelper.tag_prefix = ENV["TAG_PREFIX"] if ENV["TAG_PREFIX"]

data/lib/oidc/test/version.rb

@@ -2,6 +2,6 @@
 
 module Oidc
   module Test
-    VERSION = "0.8.1"
+    VERSION = "0.8.2"
   end
 end

data/tasks/rubygems_patch.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+require "rubygems/commands/push_command"
+
+Gem::Commands::PushCommand.prepend(Module.new do
+  def send_push_request(name, args)
+    return super unless ENV["gem_attestation_path"]
+
+    rubygems_api_request(*args, scope: get_push_scope) do |request|
+      request.set_form([
+                         ["gem", Gem.read_binary(name), { filename: name, content_type: "application/octet-stream" }],
+                         ["attestations", "[#{Gem.read_binary(ENV["gem_attestation_path"])}]",
+                          { content_type: "application/json" }]
+                       ], "multipart/form-data")
+      request.add_field "Authorization", api_key
+    end
+  end
+end)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: oidc-test
 version: !ruby/object:Gem::Version
-  version: 0.8.1
+  version: 0.8.2
 platform: ruby
 authors:
 - Samuel Giddins
@@ -29,6 +29,7 @@ files:
 - lib/oidc/test.rb
 - lib/oidc/test/version.rb
 - sig/oidc/test.rbs
+- tasks/rubygems_patch.rb
 homepage: https://github.com/segiddins/oidc-test
 licenses:
 - MIT
@@ -43,7 +44,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.6.0
+      version: 3.1.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="