vaultic 1.0.0

Secure your secrets. Sync your team. Trust your configs.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57

use std::path::Path;

use crate::adapters::git::git_hook;
use crate::cli::HookAction;
use crate::cli::output;
use crate::core::errors::{Result, VaulticError};
use crate::core::models::audit_entry::AuditAction;

/// Execute the `vaultic hook` command.
pub fn execute(action: &HookAction) -> Result<()> {
    match action {
        HookAction::Install => execute_install(),
        HookAction::Uninstall => execute_uninstall(),
    }
}

/// Install the git pre-commit hook.
fn execute_install() -> Result<()> {
    let git_dir = Path::new(".git");
    if !git_dir.exists() {
        return Err(VaulticError::HookError {
            detail: "Not a git repository. Run 'git init' first.".into(),
        });
    }

    output::header("Installing git pre-commit hook");

    git_hook::install(git_dir)?;

    output::success("Pre-commit hook installed at .git/hooks/pre-commit");
    println!("\n  The hook will block commits that include plaintext .env files.");
    println!("  To remove it later: vaultic hook uninstall");

    super::audit_helpers::log_audit(AuditAction::HookInstall, vec![], None);

    Ok(())
}

/// Uninstall the git pre-commit hook.
fn execute_uninstall() -> Result<()> {
    let git_dir = Path::new(".git");
    if !git_dir.exists() {
        return Err(VaulticError::HookError {
            detail: "Not a git repository.".into(),
        });
    }

    output::header("Uninstalling git pre-commit hook");

    git_hook::uninstall(git_dir)?;

    output::success("Pre-commit hook removed");

    super::audit_helpers::log_audit(AuditAction::HookUninstall, vec![], None);

    Ok(())
}