Created
April 18, 2024 22:34
-
-
Save binford2k/ec0c7eee90ef24c617cc461202cc7fbd to your computer and use it in GitHub Desktop.
Quick and dirty script to check Puppetfiles for executable Ruby code
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #! /usr/bin/env ruby | |
| require 'ripper' | |
| require 'json' | |
| unless ARGV[0] | |
| puts "Run this script with the name of a file, eg '#{$PROGRAM_NAME} /path/to/Puppetfile'." | |
| puts "If the file contains any Ruby methods, this will print them and then exit with an error code." | |
| exit 0 | |
| end | |
| tokens = Ripper.sexp(File.read(ARGV[0])) | |
| if tokens.nil? | |
| # no Ruby code | |
| exit 0 | |
| end | |
| tokens.flatten! | |
| indices = tokens.map.with_index { |a, i| ([:command, :xstring_literal].include? a) ? i : nil }.compact | |
| methods = indices.map { |i| tokens[i + 2] }.flatten.compact | |
| methods.reject! { |name| %w[mod forge moduledir].include? name } | |
| output = methods.uniq.map do |name| | |
| { | |
| name: name, | |
| count: methods.count(name), | |
| } | |
| end | |
| if output.size > 0 | |
| puts JSON.pretty_generate(output) | |
| exit 1 | |
| else | |
| # Only expected Puppetfile methods | |
| exit 0 | |
| end |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment