diff options
author | Luis R. Rodriguez <mcgrof@do-not-panic.com> | 2013-10-21 11:08:28 +0200 |
---|---|---|
committer | Hauke Mehrtens <hauke@hauke-m.de> | 2013-10-21 21:50:38 +0200 |
commit | 455aae0352d34e97fc5910927428c9f8ff44f77a (patch) | |
tree | e9d8179781b4e3e3b2eec1d1db14e6bc7ebf6047 /lib | |
parent | 52aca1afb093baef20140b33d50426ecf80d3f6d (diff) |
lib/bpgit.py: add git tree verification support
This verifies that the tree provided has its last commit
both tagged and also digitally signed. In short it does:
git tag -v $(git describe --dirty)
This will be used later.
Signed-off-by: Luis R. Rodriguez <mcgrof@do-not-panic.com>
Diffstat (limited to 'lib')
-rw-r--r-- | lib/bpgit.py | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/lib/bpgit.py b/lib/bpgit.py index f4af314a..02f6d8a7 100644 --- a/lib/bpgit.py +++ b/lib/bpgit.py @@ -107,6 +107,18 @@ def describe(rev='HEAD', tree=None, extra_args=[]): return stdout.strip() +def verify(git_tree): + tag = describe(rev=None, tree=git_tree, extra_args=['--dirty']) + cmd = ['git', 'tag', '-v', tag] + + process = subprocess.Popen(cmd, + stdout=subprocess.PIPE, stderr=subprocess.STDOUT, + close_fds=True, universal_newlines=True, cwd=git_tree) + stdout = process.communicate()[0] + process.wait() + + return dict(r=process.returncode, output=stdout) + def init(tree=None): process = subprocess.Popen(['git', 'init'], stdout=subprocess.PIPE, stderr=subprocess.STDOUT, |