mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2024-11-10 13:13:44 +01:00
71e5af0221
Closes ticket 30979.
111 lines
3.2 KiB
Bash
Executable File
111 lines
3.2 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
# git pre-push hook script to:
|
|
# 1) prevent "fixup!" and "squash!" commit from ending up in master, release-*
|
|
# or maint-*
|
|
# 2) Disallow pushing branches other than master, release-*
|
|
# and maint-* to origin (e.g. gitweb.torproject.org).
|
|
#
|
|
# To install this script, copy it into .git/hooks/pre-push path in your
|
|
# local copy of git repository. Make sure it has permission to execute.
|
|
# Furthermore, make sure that TOR_UPSTREAM_REMOTE_NAME environment
|
|
# variable is set to local name of git remote that corresponds to upstream
|
|
# repository on e.g. git.torproject.org.
|
|
#
|
|
# The following sample script was used as starting point:
|
|
# https://github.com/git/git/blob/master/templates/hooks--pre-push.sample
|
|
|
|
echo "Running pre-push hook"
|
|
|
|
z40=0000000000000000000000000000000000000000
|
|
|
|
upstream_name=${TOR_UPSTREAM_REMOTE_NAME:-"upstream"}
|
|
|
|
workdir=$(git rev-parse --show-toplevel)
|
|
if [ -x "$workdir/.git/hooks/pre-commit" ]; then
|
|
if ! "$workdir"/.git/hooks/pre-commit; then
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
PT_DIR=scripts/maint/practracker
|
|
|
|
if [ -e "${PT_DIR}/practracker.py" ]; then
|
|
if [ -e "${PT_DIR}/.enable_practracker_in_hooks" ]; then
|
|
if ! python3 "${PT_DIR}/practracker.py" "$workdir"; then
|
|
exit 1
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
remote="$1"
|
|
|
|
remote_name=$(git remote --verbose | grep "$2" | awk '{print $1}' | head -n 1)
|
|
|
|
if [[ "$remote_name" != "$upstream_name" ]]; then
|
|
echo "Not pushing to upstream - refraining from further checks"
|
|
exit 0
|
|
fi
|
|
|
|
ref_is_upstream_branch() {
|
|
if [ "$1" == "refs/heads/master" ] ||
|
|
[[ "$1" == refs/heads/release-* ]] ||
|
|
[[ "$1" == refs/heads/maint-* ]]
|
|
then
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
# shellcheck disable=SC2034
|
|
while read -r local_ref local_sha remote_ref remote_sha
|
|
do
|
|
if [ "$local_sha" = $z40 ]
|
|
then
|
|
# Handle delete
|
|
:
|
|
else
|
|
if [ "$remote_sha" = $z40 ]
|
|
then
|
|
# New branch, examine all commits
|
|
range="$local_sha"
|
|
else
|
|
# Update to existing branch, examine new commits
|
|
range="$remote_sha..$local_sha"
|
|
fi
|
|
|
|
if (ref_is_upstream_branch "$local_ref" == 0 ||
|
|
ref_is_upstream_branch "$remote_ref" == 0) &&
|
|
[ "$local_ref" != "$remote_ref" ]
|
|
then
|
|
if [ "$remote" == "origin" ]
|
|
then
|
|
echo >&2 "Not pushing: $local_ref to $remote_ref"
|
|
echo >&2 "If you really want to push this, use --no-verify."
|
|
exit 1
|
|
else
|
|
continue
|
|
fi
|
|
fi
|
|
|
|
# Check for fixup! commit
|
|
commit=$(git rev-list -n 1 --grep '^fixup!' "$range")
|
|
if [ -n "$commit" ]
|
|
then
|
|
echo >&2 "Found fixup! commit in $local_ref, not pushing"
|
|
echo >&2 "If you really want to push this, use --no-verify."
|
|
exit 1
|
|
fi
|
|
|
|
# Check for squash! commit
|
|
commit=$(git rev-list -n 1 --grep '^squash!' "$range")
|
|
if [ -n "$commit" ]
|
|
then
|
|
echo >&2 "Found squash! commit in $local_ref, not pushing"
|
|
echo >&2 "If you really want to push this, use --no-verify."
|
|
exit 1
|
|
fi
|
|
fi
|
|
done
|
|
|
|
exit 0
|