Skip to main content

fluidattacks_core_git/clone/
codecommit.rs

1use anyhow::Result;
2use std::path::Path;
3use tokio::process::Command;
4
5use super::{build_clone_args, reason, CloneOpts};
6use crate::aws;
7use crate::types::CredentialKind;
8
9pub async fn clone_codecommit(opts: &CloneOpts, dest: &Path) -> Result<()> {
10    let (arn, external_id) = match &opts.credentials.as_ref().map(|c| &c.kind) {
11        Some(CredentialKind::AwsRole { arn, external_id }) => (arn.as_str(), external_id.as_str()),
12        _ => anyhow::bail!("expected AwsRole credentials for CodeCommit clone"),
13    };
14
15    let creds = aws::assume_role(arn, external_id, &opts.repo_url).await?;
16
17    let extra_config = vec!["-c".to_owned(), "http.sslVerify=false".to_owned()];
18    let args = build_clone_args(opts, &opts.repo_url, dest, &extra_config);
19
20    reason::run(
21        Command::new("git")
22            .args(&args)
23            .env("AWS_ACCESS_KEY_ID", &creds.access_key)
24            .env("AWS_SECRET_ACCESS_KEY", &creds.secret_key)
25            .env("AWS_SESSION_TOKEN", &creds.session_token)
26            .env("AWS_DEFAULT_REGION", &creds.region),
27        "CodeCommit",
28        &[],
29    )
30    .await
31}