harn-cli 0.10.41

CLI for the Harn programming language — run, test, REPL, format, and lint
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83

//! Git spec handling and the hardened git environment.

use super::super::git_source::pick_ls_remote_commit;

#[cfg(unix)]
use super::super::git_source::HardenedGitEnv;
#[cfg(unix)]
use crate::package::*;

#[test]
fn pick_ls_remote_commit_prefers_peeled_tag_over_tag_object() {
    // Real-world example from notion-sdk-harn v0.1.0: the tag is
    // annotated, so ls-remote returns both the tag-object SHA and the
    // commit it points at.
    let output = "\
963b6e8acfdf030a9b922bc5a73e010758ff47da\trefs/tags/v0.1.0\n\
bad580c5fbe8ede612b2748ad98606642ce2fc02\trefs/tags/v0.1.0^{}\n";
    assert_eq!(
        pick_ls_remote_commit(output),
        Some("bad580c5fbe8ede612b2748ad98606642ce2fc02"),
    );
}

#[test]
fn pick_ls_remote_commit_falls_back_to_first_match_for_lightweight_tags() {
    let output = "\
abc123abc123abc123abc123abc123abc1234567\trefs/tags/v0.0.1\n";
    assert_eq!(
        pick_ls_remote_commit(output),
        Some("abc123abc123abc123abc123abc123abc1234567"),
    );
}

#[test]
fn pick_ls_remote_commit_returns_none_on_empty_output() {
    assert_eq!(pick_ls_remote_commit(""), None);
}

#[cfg(unix)]
#[test]
fn hardened_git_env_scrubs_ambient_git_credentials_and_config() {
    let git_env = HardenedGitEnv::new().unwrap();
    let mut command = process::Command::new("/usr/bin/env");
    command
        .env("HOME", "/sensitive/home")
        .env("XDG_CONFIG_HOME", "/sensitive/config")
        .env("GIT_ASKPASS", "/sensitive/askpass")
        .env("GIT_SSH_COMMAND", "ssh -i /sensitive/key")
        .env("SSH_AUTH_SOCK", "/sensitive/agent.sock")
        .env("GIT_CONFIG_COUNT", "1")
        .env(
            "GIT_CONFIG_KEY_0",
            "http.https://attacker.example/.extraheader",
        )
        .env("GIT_CONFIG_VALUE_0", "Authorization: bearer secret");
    git_env.apply_to(&mut command, Cwd::Detached);

    let output = command.output().unwrap();
    assert!(
        output.status.success(),
        "env probe failed: {}",
        String::from_utf8_lossy(&output.stderr)
    );
    let stdout = String::from_utf8(output.stdout).unwrap();
    let vars: std::collections::BTreeMap<_, _> = stdout
        .lines()
        .filter_map(|line| line.split_once('='))
        .map(|(name, value)| (name.to_string(), value.to_string()))
        .collect();

    assert_eq!(Path::new(&vars["HOME"]), git_env.home);
    assert_eq!(Path::new(&vars["XDG_CONFIG_HOME"]), git_env.config_home);
    assert_eq!(Path::new(&vars["GIT_CONFIG_GLOBAL"]), git_env.global_config);
    assert_eq!(Path::new(&vars["GIT_CONFIG_SYSTEM"]), git_env.system_config);
    assert_eq!(vars["GIT_CONFIG_NOSYSTEM"], "1");
    assert_eq!(vars["GIT_TERMINAL_PROMPT"], "0");
    assert!(!vars.contains_key("GIT_ASKPASS"));
    assert!(!vars.contains_key("GIT_SSH_COMMAND"));
    assert!(!vars.contains_key("SSH_AUTH_SOCK"));
    assert!(!vars.contains_key("GIT_CONFIG_COUNT"));
    assert!(!vars.contains_key("GIT_CONFIG_KEY_0"));
    assert!(!vars.contains_key("GIT_CONFIG_VALUE_0"));
}