tor/scripts/git/pre-push.git-hook

#!/usr/bin/env bash

# git pre-push hook script to:
# 1) prevent "fixup!" and "squash!" commit from ending up in master, release-*
#    or maint-*
# 2) Disallow pushing branches other than master, release-*
#    and maint-* to origin (e.g. gitweb.torproject.org).
#
# To install this script, copy it into .git/hooks/pre-push path in your
# local copy of git repository. Make sure it has permission to execute.
# Furthermore, make sure that TOR_UPSTREAM_REMOTE_NAME environment
# variable is set to local name of git remote that corresponds to upstream
# repository on e.g. git.torproject.org.
#
# The following sample script was used as starting point:
# https://github.com/git/git/blob/master/templates/hooks--pre-push.sample

echo "Running pre-push hook"

z40=0000000000000000000000000000000000000000

upstream_name=${TOR_UPSTREAM_REMOTE_NAME:-"upstream"}

workdir=$(git rev-parse --show-toplevel)
if [ -x "$workdir/.git/hooks/pre-commit" ]; then
  if ! "$workdir"/.git/hooks/pre-commit; then
    exit 1
  fi
fi

PT_DIR=scripts/maint/practracker

if [ -e "${PT_DIR}/practracker.py" ]; then
    if [ -e "${PT_DIR}/.enable_practracker_in_hooks" ]; then
        if ! python3 "${PT_DIR}/practracker.py" "$workdir"; then
            exit 1
        fi
    fi
fi

remote="$1"

remote_name=$(git remote --verbose | grep "$2" | awk '{print $1}' | head -n 1)

if [[ "$remote_name" != "$upstream_name" ]]; then
  echo "Not pushing to upstream - refraining from further checks"
  exit 0
fi

ref_is_upstream_branch() {
        if [ "$1" == "refs/heads/master" ] ||
                [[ "$1" == refs/heads/release-* ]] ||
                [[ "$1" == refs/heads/maint-* ]]
        then
                return 1
        fi
}

# shellcheck disable=SC2034
while read -r local_ref local_sha remote_ref remote_sha
do
	if [ "$local_sha" = $z40 ]
	then
		# Handle delete
		:
	else
		if [ "$remote_sha" = $z40 ]
		then
			# New branch, examine all commits
			range="$local_sha"
		else
			# Update to existing branch, examine new commits
			range="$remote_sha..$local_sha"
		fi

                if (ref_is_upstream_branch "$local_ref" == 0 ||
                        ref_is_upstream_branch "$remote_ref"  == 0) &&
                        [ "$local_ref" != "$remote_ref" ]
                then
                        if [ "$remote" == "origin" ]
                        then
                                echo >&2 "Not pushing: $local_ref to $remote_ref"
			        echo >&2 "If you really want to push this, use --no-verify."
                                exit 1
                        else
                                continue
                        fi
                fi

                # Check for fixup! commit
                commit=$(git rev-list -n 1 --grep '^fixup!' "$range")
		if [ -n "$commit" ]
		then
			echo >&2 "Found fixup! commit in $local_ref, not pushing"
			echo >&2 "If you really want to push this, use --no-verify."
			exit 1
		fi

                # Check for squash! commit
                commit=$(git rev-list -n 1 --grep '^squash!' "$range")
		if [ -n "$commit" ]
		then
			echo >&2 "Found squash! commit in $local_ref, not pushing"
			echo >&2 "If you really want to push this, use --no-verify."
			exit 1
		fi
	fi
done

exit 0