pre-commit-sign 1.1.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 7d34fd4779846250edca0606f141e3daa993e3ab
+  data.tar.gz: 047f0fcc034093ecdcb2cd031258cb82afc01724
+SHA512:
+  metadata.gz: e7e8c907747a29fd1ffaad82490e9a127bbebfaf74d60e85e31cd7d74e79c991ed04fd54e02bf6dc0d5443abd24266b73f082efb4945d9d6b8f59d4ffc0d6849
+  data.tar.gz: 1964f4ed3d8afbfa6458e9f742d694b2bbbf44747789ac6814e5b09581fb0d27eb36393c7855afec955ca45b39ca1e82579258eddea3a65b6c79a18566af51df

data/bin/sign-commit

@@ -0,0 +1,24 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'pre-commit-sign'
+
+if ARGV.empty?
+  puts "Usage: #{$PROGRAM_NAME} <file>\nWhere file is commit message path"
+  exit(false)
+elsif !File.exist?(ARGV[0])
+  puts "File #{ARGV[0]} does not exist."
+  exit(false)
+else
+  pc = PrecommitSign.new(ARGV[0])
+  if pc.commit_signature? && !pc.valid_signature?
+    puts "Existing signature in commit message is invalid (#{pc.existing_signature}), re-signing"
+  elsif pc.commit_signature? && pc.valid_signature?
+    puts 'Existing signature in commit message is valid, not signing'
+  end
+
+  unless pc.valid_signature?
+    pc.write_signature
+    puts "Signed commit with #{pc.signature}"
+  end
+end

data/lib/pre-commit-sign.rb

@@ -0,0 +1,71 @@
+# frozen_string_literal: true
+
+require 'date'
+require 'digest'
+
+# Class for signing Git commit messages with a computed hash
+class PrecommitSign
+  SIG_KEY = 'Precommit-Verified'
+
+  attr_accessor :message
+  attr_writer :date # Manually set a commit date with a Time object
+
+  def initialize(message_file = nil)
+    @message_file = message_file
+    @message = IO.read(@message_file) unless @message_file.nil?
+  end
+
+  def self.from_message(message)
+    instance = new
+    instance.message = message
+    instance
+  end
+
+  def full_message
+    message
+  end
+
+  # Ignores comments, leading and trailing whitespace and the signature footer
+  def real_message
+    m = full_message.split("\n").reject { |l| l.start_with?('#', "#{SIG_KEY}:") }.join("\n")
+    /\A\s*(.*?)\s*\Z/m.match(m).captures.first
+  end
+
+  def date
+    if ENV.key?('GIT_AUTHOR_DATE')
+      DateTime.strptime(ENV['GIT_AUTHOR_DATE'], '@%s %z').to_time.utc
+    else
+      (@date || Time.now).utc
+    end
+  end
+
+  def commit_title
+    real_message.split("\n").first
+  end
+
+  def commit_message
+    real_message.split("\n")[2..-1].join("\n")
+  end
+
+  def signature
+    Digest::SHA256.hexdigest("#{real_message}#{date}")
+  end
+
+  def commit_signature?
+    /^Precommit-Verified:/.match?(full_message)
+  end
+
+  def valid_signature?
+    existing_signature == signature
+  end
+
+  def existing_signature
+    /#{SIG_KEY}:\s*([a-f0-9]+)$/.match(full_message)&.captures&.first
+  end
+
+  # Real message with signature
+  def write_signature
+    self.message = "#{real_message.chomp}\n\n#{SIG_KEY}: #{signature}\n"
+    IO.write(@message_file, message, 0, mode: 'w') unless @message_file.nil?
+  end
+end

metadata

@@ -0,0 +1,48 @@
+--- !ruby/object:Gem::Specification
+name: pre-commit-sign
+version: !ruby/object:Gem::Version
+  version: 1.1.1
+platform: ruby
+authors:
+- Matt Kulka
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2018-06-14 00:00:00.000000000 Z
+dependencies: []
+description: This pre-commit plugin will hash certain fields of the commit message
+  and sign it.
+email: matt@lqx.net
+executables:
+- sign-commit
+extensions: []
+extra_rdoc_files: []
+files:
+- bin/sign-commit
+- lib/pre-commit-sign.rb
+homepage: https://github.com/mattlqx/pre-commit-sign
+licenses:
+- MIT
+metadata:
+  source_code_uri: https://github.com/mattlqx/pre-commit-sign
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '2.3'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.6.13
+signing_key: 
+specification_version: 4
+summary: Pre-commit plugin for signing commits
+test_files: []