pkg/flag/registry_flags.go - main - githubmirror/trivy

pkg/flag/registry_flags.go
110 строк3 KB
Owen Rumney
fix(cli): Add more non-sensitive flags to telemetry (#9110)
02 июл 2025, 13:34
02 июл 2025, 13:347041a39
package flag

import (
	"io"
	"os"
	"strings"

	"golang.org/x/xerrors"

	"github.com/aquasecurity/trivy/pkg/fanal/types"
)

var (
	UsernameFlag = Flag[[]string]{
		Name:       "username",
		ConfigName: "registry.username",
		Usage:      "username. Comma-separated usernames allowed.",
	}
	PasswordFlag = Flag[[]string]{
		Name:       "password",
		ConfigName: "registry.password",
		Usage:      "password. Comma-separated passwords allowed. TRIVY_PASSWORD should be used for security reasons.",
	}
	PasswordStdinFlag = Flag[bool]{
		Name:          "password-stdin",
		ConfigName:    "registry.password-stdin",
		Usage:         "password from stdin. Comma-separated passwords are not supported.",
		TelemetrySafe: true,
	}
	RegistryTokenFlag = Flag[string]{
		Name:       "registry-token",
		ConfigName: "registry.token",
		Usage:      "registry token",
	}
	RegistryMirrorsFlag = Flag[map[string][]string]{
		ConfigName: "registry.mirrors",
		Usage:      "map of hosts and registries for them.",
	}
)

type RegistryFlagGroup struct {
	Username        *Flag[[]string]
	Password        *Flag[[]string]
	PasswordStdin   *Flag[bool]
	RegistryToken   *Flag[string]
	RegistryMirrors *Flag[map[string][]string]
}

type RegistryOptions struct {
	Credentials     []types.Credential
	RegistryToken   string
	RegistryMirrors map[string][]string
}

func NewRegistryFlagGroup() *RegistryFlagGroup {
	return &RegistryFlagGroup{
		Username:        UsernameFlag.Clone(),
		Password:        PasswordFlag.Clone(),
		PasswordStdin:   PasswordStdinFlag.Clone(),
		RegistryToken:   RegistryTokenFlag.Clone(),
		RegistryMirrors: RegistryMirrorsFlag.Clone(),
	}
}

func (f *RegistryFlagGroup) Name() string {
	return "Registry"
}

func (f *RegistryFlagGroup) Flags() []Flagger {
	return []Flagger{
		f.Username,
		f.Password,
		f.PasswordStdin,
		f.RegistryToken,
		f.RegistryMirrors,
	}
}

func (f *RegistryFlagGroup) ToOptions(opts *Options) error {
	var credentials []types.Credential
	users := f.Username.Value()
	passwords := f.Password.Value()
	if f.PasswordStdin.Value() {
		if len(passwords) != 0 {
			return xerrors.New("'--password' and '--password-stdin' can't be used at the same time")
		}
		contents, err := io.ReadAll(os.Stdin)
		if err != nil {
			return xerrors.Errorf("failed to read from stdin: %w", err)
		}
		// "--password-stdin" doesn't support comma-separated passwords
		passwords = []string{strings.TrimRight(string(contents), "\r\n")}
	}
	if len(users) != len(passwords) {
		return xerrors.New("the number of usernames and passwords must match")
	}
	for i, user := range users {
		credentials = append(credentials, types.Credential{
			Username: strings.TrimSpace(user),
			Password: strings.TrimSpace(passwords[i]),
		})
	}

	opts.RegistryOptions = RegistryOptions{
		Credentials:     credentials,
		RegistryToken:   f.RegistryToken.Value(),
		RegistryMirrors: f.RegistryMirrors.Value(),
	}
	return nil
}