pre-commit

#!/bin/bash

# Find an object to check against
if git rev-parse --verify HEAD >/dev/null 2>&1
then
    # If we have a commit, use it
    against=HEAD
else
    # If we don't, diff against empty object
    against=4b825dc642cb6eb9a060e54bf8d69288fbee4904
fi

# Redirect output to stderr.
exec 1>&2

# Check changed files for an AWS keys
KEY=$(
    git diff --cached --name-only -z $against |
        tr '\0' '\n' |
        grep --invert-match --fixed-strings 'yarn.lock' |
        grep --invert-match --fixed-strings 'Gemfile' |
        grep --invert-match --fixed-strings 'Gemfile.lock' |
        xargs ls -d 2> /dev/null |
        xargs cat |
        grep -v '\.\/node_modules\/' |
        perl -nle'print $& if m{(?<![A-Z0-9])[A-Z0-9]{20}(?![A-Z0-9])|(?<![A-Za-z0-9/+=])[A-Za-z0-9/+=]{40}(?![A-Za-z0-9/+=])}'
    )

if [[ "$KEY" != "" ]] && [[ "$KEY" != *"/components/schemas/"* ]]; then
    echo "Found patterns for AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY"
    echo "Please check your code and remove API keys."
    echo "$KEY"
    exit 1
fi

# stash unstaged changes
git diff > unstaged.diff
git apply -R unstaged.diff

# Lint, fix, store exit code, and stage modifications
CHANGED_RUBY_FILES=$(git diff --name-only --cached | xargs ls -1 2>/dev/null | grep '\.rb$')

echo "$CHANGED_RUBY_FILES"
if [[ -n "$CHANGED_RUBY_FILES" ]]; then echo "$CHANGED_RUBY_FILES" | xargs rubocop --force-exclusion --fail-fast --autocorrect ; fi
RUBOCOP_EXIT_CODE="$?"
CHANGED_JS_FILES=$(git diff --name-only --cached | xargs ls -1 2>/dev/null | grep 'app\|spec' | grep '\.js$')
if [[ -n "$CHANGED_JS_FILES" ]]; then echo "$CHANGED_JS_FILES" | xargs yarn run prettier --write ; fi
if [[ -n "$CHANGED_JS_FILES" ]]; then echo "$CHANGED_JS_FILES" | xargs yarn run eslint --max-warnings 0 --fix ; fi
ESLINT_EXIT_CODE="$?"
((EXIT_CODE = RUBOCOP_EXIT_CODE ** 2 + ESLINT_EXIT_CODE ** 2))

git add --update

# Pop the unstaged changes
git apply unstaged.diff
rm unstaged.diff

exit "$EXIT_CODE"