mysecrets.py

import os
import subprocess
import shutil
import streamlit as st

from git import Repo
from configs import OS_TYPE, REPOSITORY_FOLDER, SECRETS_FOLDER


def clone_repo(repo_url, repo_path):
    """
    Clone repo from GitHub to local dir.
    """
    try:
        if not os.path.exists(repo_path):
            os.makedirs(repo_path)
        Repo.clone_from(repo_url, repo_path)
        print(f"Git repository {repo_url} was cloned to {repo_path}.")

    except Exception as e:
        print(f"Error occurred during cloning Git repository: {e}")


def delete_repo(repo_path):
    """
    Delete local repo by repo_path.
    """

    def change_permissions(path):
        """
        Change permissions to all files by path.
        """
        for root, dirs, files in os.walk(path, topdown=False):
            for name in files:
                file_path = os.path.join(root, name)
                os.chmod(file_path, 0o777)  # Assign full access
            for name in dirs:
                dir_path = os.path.join(root, name)
                os.chmod(dir_path, 0o777)  # Assign full access

    try:
        change_permissions(repo_path)
        shutil.rmtree(repo_path)
        print(f"Git repository was deleted by path: {repo_path}.")

    except FileNotFoundError:
        print(f"Git repository wasn't be found by path: {repo_path}.")

    except Exception as e:
        print(f"Error occurred during deleting Git repository: {e}")


def gitleaks_check_secrets(repo_path):
    """
    Check secrets with gitleaks.
    """
    secrets_path = f'{SECRETS_FOLDER}/gitleaks_report_{repo_path.split("/")[-1]}.json'

    try:
        match OS_TYPE:
            case "Windows":
                gitleaks_path = "gitleaks/gitleaks_8.18.4_windows_x64/gitleaks.exe"
                scan_command = [gitleaks_path, "detect", "--source", repo_path,
                                "--report-format", "json", "--report-path", secrets_path]
            case "Linux":
                gitleaks_path = "gitleaks/gitleaks_8.18.4_linux_x64/gitleaks"
                subprocess.run(["chmod", "+x", gitleaks_path], check=True)
                scan_command = [gitleaks_path, "detect", "--source", repo_path,
                                "--report-format", "json", "--report-path", secrets_path]
            case "Darwin":
                gitleaks_path = "gitleaks/gitleaks_8.18.4_darwin_x64/gitleaks"
                subprocess.run(["chmod", "+x", gitleaks_path], check=True)
                scan_command = [gitleaks_path, "detect", "--source", repo_path,
                                "--report-format", "json", "--report-path", secrets_path]
            case _:
                st.error(f"Unsupported OS: {OS_TYPE}")
                raise EnvironmentError(f"Unsupported operating system: {OS_TYPE}")
        subprocess.run(scan_command, stdout=subprocess.PIPE, stderr=subprocess.PIPE)

    except Exception as e:
        print(f"Somthing went wrong in checking secrets: {e}")

    return secrets_path


def check_secrets(user, repository):
    repo_url = f'https://github.com/{user}/{repository}'
    repo_path = f'{REPOSITORY_FOLDER}/{repository}'
    clone_repo(repo_url, repo_path)
    secrets_path = gitleaks_check_secrets(repo_path)
    delete_repo(repo_path)
    return secrets_path