#!/usr/bin/env bash set -eo pipefail # globals variables # hook ID, see `- id` for details in .pre-commit-hooks.yaml file readonly HOOK_ID='terrascan' # shellcheck disable=SC2155 # No way to assign to readonly variable in separate lines readonly SCRIPT_DIR="$(dirname "$(realpath "${BASH_SOURCE[0]}")")" # shellcheck source=_common.sh . "$SCRIPT_DIR/_common.sh" function main { common::initialize "$SCRIPT_DIR" common::parse_cmdline "$@" common::passthrough_env_vars # shellcheck disable=SC2153 # False positive common::per_dir_hook "${ARGS[*]}" "$HOOK_ID" "${FILES[@]}" } ####################################################################### # Unique part of `common::per_dir_hook`. The function is executed in loop # on each provided dir path. Run wrapped tool with specified arguments # Arguments: # args (string with array) arguments that configure wrapped tool behavior # dir_path (string) PATH to dir relative to git repo root. # Can be used in error logging # Outputs: # If failed - print out hook checks status ####################################################################### function per_dir_hook_unique_part { local -r args="$1" # shellcheck disable=SC2034 # Unused var. local -r dir_path="$2" # pass the arguments to hook # shellcheck disable=SC2068 # hook fails when quoting is used ("$arg[@]") terrascan scan -i terraform ${args[@]} # return exit code to common::per_dir_hook local exit_code=$? return $exit_code } ####################################################################### # Unique part of `common::per_dir_hook`. The function is executed one time # in the root git repo # Arguments: # args (string with array) arguments that configure wrapped tool behavior ####################################################################### function run_hook_on_whole_repo { local -r args="$1" # pass the arguments to hook # shellcheck disable=SC2068 # hook fails when quoting is used ("$arg[@]") terrascan scan -i terraform ${args[@]} # return exit code to common::per_dir_hook local exit_code=$? return $exit_code } [ "${BASH_SOURCE[0]}" != "$0" ] || main "$@"