-
Notifications
You must be signed in to change notification settings - Fork 20
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
chore(deps): update anchore/sbom-action action to v0.17.8 (#353)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
- Loading branch information
1 parent
608aa42
commit d69a544
Showing
34 changed files
with
588 additions
and
476 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -61,7 +61,7 @@ jobs: | |
| - name: Download Syft | ||
| id: syft | ||
| uses: anchore/sbom-action/[email protected].7 | ||
| uses: anchore/sbom-action/[email protected].8 | ||
|
|
||
| - name: Set up Docker Buildx | ||
| uses: docker/setup-buildx-action@v3 | ||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,107 +1,179 @@ | ||
| #pragma once | ||
|
|
||
| #include <string> | ||
| #include <fts.h> | ||
| #include <grp.h> | ||
| #include <string> | ||
| #include <sys/types.h> | ||
| #include <pwd.h> | ||
| #include <unistd.h> | ||
| #include "../../common//Utility.h" | ||
| namespace os { | ||
|
|
||
| // Set the ownership for a path. This function never follows any symlinks. | ||
| inline bool chown(int uid, int gid, const std::string& path, bool recursive) | ||
| #include "../../common/Utility.h" | ||
|
|
||
| namespace os | ||
| { | ||
|
|
||
| /** | ||
| * @brief Changes owner and group of a file or directory | ||
| * @param path Path to the file or directory | ||
| * @param uid User id of the new owner | ||
| * @param gid Group id of the new group | ||
| * @param recursive If true, applies changes recursively for directories | ||
| * @return true if successful, false otherwise | ||
| */ | ||
| inline bool chown(const std::string &path, uid_t uid, gid_t gid, bool recursive = false) | ||
| { | ||
| const static char fname[] = "os::chown() "; | ||
| constexpr char fname[] = "os::chown() "; | ||
|
|
||
| if (uid < 0 || gid < 0) | ||
| // Input validation | ||
| if (path.empty() || !fs::exists(path)) | ||
| { | ||
| LOG_WAR << fname << "invalid uid: <" << uid << "> or gid <" << gid << ">"; | ||
| LOG_ERR << fname << "Path does not exist: " << path; | ||
| return false; | ||
| } | ||
|
|
||
| char* path_[] = { const_cast<char*>(path.c_str()), nullptr }; | ||
| // Prepare FTS path array | ||
| char *const path_arr[] = {const_cast<char *>(path.c_str()), nullptr}; | ||
|
|
||
| FTS* tree = ::fts_open(path_, FTS_NOCHDIR | FTS_PHYSICAL, nullptr); | ||
| // Open file hierarchy | ||
| const int fts_options = FTS_NOCHDIR | FTS_PHYSICAL; | ||
| std::unique_ptr<FTS, decltype(&::fts_close)> tree(::fts_open(path_arr, fts_options, nullptr), ::fts_close); | ||
|
|
||
| if (tree == nullptr) | ||
| { | ||
| LOG_ERR << fname << "Failed to open path: " << path << ", error: " << std::strerror(errno); | ||
| return false; | ||
| } | ||
|
|
||
| FTSENT *node; | ||
| while ((node = ::fts_read(tree)) != nullptr) | ||
| while ((node = ::fts_read(tree.get())) != nullptr) | ||
| { | ||
| // Early exit for non-recursive mode | ||
| if (node->fts_level > FTS_ROOTLEVEL && !recursive) | ||
| { | ||
| break; | ||
| } | ||
|
|
||
| switch (node->fts_info) | ||
| { | ||
| // Preorder directory. | ||
| case FTS_D: | ||
| // Regular file. | ||
| case FTS_F: | ||
| // Symbolic link. | ||
| case FTS_SL: | ||
| // Symbolic link without target. | ||
| case FTS_SLNONE: { | ||
| if (::lchown(node->fts_path, static_cast<uid_t>(uid), static_cast<gid_t>(gid)) < 0) | ||
| case FTS_D: // Preorder directory | ||
| case FTS_F: // Regular file | ||
| case FTS_SL: // Symbolic link | ||
| case FTS_SLNONE: | ||
| { // Symbolic link without target | ||
| if (::lchown(node->fts_path, uid, gid) < 0) | ||
| { | ||
| ::fts_close(tree); | ||
| LOG_ERR << fname << "Failed to change ownership of " << node->fts_path << ", error: " << std::strerror(errno); | ||
| return false; | ||
| } | ||
|
|
||
| LOG_DBG << fname << "Changed ownership of " << node->fts_path << " to uid=" << uid << " gid=" << gid; | ||
| break; | ||
| } | ||
|
|
||
| // Unreadable directory. | ||
| case FTS_DNR: | ||
| // Error; errno is set. | ||
| case FTS_ERR: | ||
| // Directory that causes cycles. | ||
| case FTS_DC: | ||
| // `stat(2)` failed. | ||
| case FTS_NS: { | ||
| ::fts_close(tree); | ||
| case FTS_DNR: // Unreadable directory | ||
| case FTS_ERR: // Error; errno is set | ||
| case FTS_DC: // Directory that causes cycles | ||
| case FTS_NS: | ||
| { // stat(2) failed | ||
| LOG_ERR << fname << "Failed to process " << node->fts_path << ", error type: " << node->fts_info << ", error: " << std::strerror(node->fts_errno); | ||
| return false; | ||
| } | ||
|
|
||
| default: | ||
| break; | ||
| } | ||
|
|
||
| if (node->fts_level == FTS_ROOTLEVEL && !recursive) | ||
| { | ||
| break; | ||
| } | ||
| } | ||
|
|
||
| ::fts_close(tree); | ||
| LOG_DBG << fname << "Successfully changed ownership" << (recursive ? " recursively" : "") << " for " << path; | ||
| return true; | ||
| } | ||
|
|
||
|
|
||
| // Changes the specified path's user and group ownership to that of | ||
| // the specified user. | ||
| inline bool chown(const std::string& path, const std::string& user, bool recursive = false) | ||
| /** | ||
| * @brief Changes owner and group of a file or directory | ||
| * @param path Path to the file or directory | ||
| * @param user Username of the new owner (can be empty to keep current) | ||
| * @param group Group name of the new group (can be empty to keep current) | ||
| * @param recursive If true, applies changes recursively for directories | ||
| * @return true if successful, false otherwise | ||
| */ | ||
| inline bool chown(const std::string &path, std::string user, std::string group = "", bool recursive = false) | ||
| { | ||
| const static char fname[] = "os::chown() "; | ||
| constexpr char fname[] = "os::chown() "; | ||
|
|
||
| // Input validation | ||
| if (path.empty()) | ||
| { | ||
| LOG_ERR << fname << "Empty path provided"; | ||
| return false; | ||
| } | ||
|
|
||
| if (user.empty()) return false; | ||
| // Verify path exists | ||
| if (!fs::exists(path)) | ||
| { | ||
| LOG_ERR << fname << "Path does not exist: " << path; | ||
| return false; | ||
| } | ||
|
|
||
| passwd* passwd; | ||
| errno = 0; | ||
| if ((passwd = ::getpwnam(user.c_str())) == nullptr) | ||
| // Get current ownership | ||
| struct stat st; | ||
| if (::lstat(path.c_str(), &st) != 0) | ||
| { | ||
| LOG_ERR << fname << "Failed to get file stats for " << path << ": " << std::strerror(errno); | ||
| return false; | ||
| } | ||
|
|
||
| // Initialize with current values | ||
| uid_t uid = st.st_uid; | ||
| gid_t gid = st.st_gid; | ||
|
|
||
| // Update uid if user is specified | ||
| if (!user.empty()) | ||
| { | ||
| if (!Utility::getUid(user, uid, gid)) | ||
| { | ||
| LOG_ERR << fname << "Failed to get user information for '" << user << "'"; | ||
| return false; | ||
| } | ||
| } | ||
|
|
||
| if (errno) | ||
| // Update gid if group is specified | ||
| if (!group.empty()) | ||
| { | ||
| // Determine required buffer size (cached static value) | ||
| static const auto bufsize = []() | ||
| { | ||
| long size = sysconf(_SC_GETGR_R_SIZE_MAX); | ||
| return (size == -1) ? 16384 : size; | ||
| }(); | ||
|
|
||
| // Allocate buffer | ||
| std::vector<char> buffer(bufsize); | ||
| struct group grp; | ||
| struct group *result = nullptr; | ||
|
|
||
| // Try getting group information | ||
| int err = ::getgrnam_r(group.c_str(), &grp, buffer.data(), buffer.size(), &result); | ||
| if (err != 0) | ||
| { | ||
| LOG_WAR << fname << "Failed to get user information for '" << user << "'"; | ||
| LOG_WAR << fname << "Failed to get group information for '" << group << "': " << std::strerror(err); | ||
| } | ||
| else if (result == nullptr) | ||
| { | ||
| LOG_WAR << fname << "Group '" << group << "' not found"; | ||
| } | ||
| else | ||
| { | ||
| LOG_WAR << fname << "No such user '" << user << "'"; | ||
| gid = grp.gr_gid; | ||
| } | ||
| return false; | ||
| } | ||
|
|
||
| return chown(passwd->pw_uid, passwd->pw_gid, path, recursive); | ||
| LOG_DBG << fname << "Attempting to change ownership of " << path | ||
| << " to " << (user.empty() ? "current user" : user) | ||
| << " (uid=" << uid << ")" | ||
| << ", group=" << (group.empty() ? "current group" : group) | ||
| << " (gid=" << gid << ")" | ||
| << (recursive ? " recursively" : ""); | ||
|
|
||
| // Attempt to change ownership | ||
| return chown(path, uid, gid, recursive); | ||
| } | ||
|
|
||
| } // namespace os { |
Oops, something went wrong.