DivestOS/Scripts/Common/Tag_Verifier.sh

47 lines
1.6 KiB
Bash
Raw Normal View History

#!/bin/bash
#DivestOS: A privacy focused mobile distribution
#Copyright (c) 2022 Divested Computing Group
#
#This program is free software: you can redistribute it and/or modify
#it under the terms of the GNU General Public License as published by
#the Free Software Foundation, either version 3 of the License, or
#(at your option) any later version.
#
#This program is distributed in the hope that it will be useful,
#but WITHOUT ANY WARRANTY; without even the implied warranty of
#MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
#GNU General Public License for more details.
#
#You should have received a copy of the GNU General Public License
#along with this program. If not, see <https://www.gnu.org/licenses/>.
umask 0022;
set -uo pipefail;
source "$DOS_SCRIPTS_COMMON/Shell.sh";
gpgVerifyGitTag() {
if [ -r "$DOS_TMP_GNUPG/pubring.kbx" ]; then
if git -C "$1" verify-tag "$2" &>/dev/null; then
echo -e "\e[0;32mGPG Verified Git Tag Successfully: $1\e[0m";
else
echo -e "\e[0;31mWARNING: GPG Verification of Git Tag Failed: $1\e[0m";
#sleep 60;
fi;
#git -C $1 log --show-signature -1;
else
echo -e "\e[0;33mWARNING: keyring is unavailable, GPG verification of $1 will not be performed!\e[0m";
fi;
}
export -f gpgVerifyGitHead;
verifyTagIfPossible() {
if [[ "$1" == "platform/"* ]]; then
tagMatch=$(git -C "$DOS_BUILD_BASE$2" describe --exact-match HEAD);
if [ ! -z "$tagMatch" ]; then
gpgVerifyGitTag "$DOS_BUILD_BASE$2" "$tagMatch";
else
echo -e "\e[0;33mWARNING: No tag match for $2 \e[0m";
fi;
fi;
}
export -f verifyTagIfPossible;