Git object content analysis in the git:pre-receive-analyze command is now performed by a WebAssembly module. This patch adds our Rust library called wasmtime-wrapper-lib, it is in charge of instantiating and executing WebAssembly modules. It exposes two functions, they are called by using PHP's FFI. In plugins/git/additional-packages/pre-receive-hook-example we provide Rust code to create a WebAssembly module for testing purposes. This module expects a JSON string as input, it simply checks if the word 'Tuleap' is found in the git object content. If that is the case a rejection message in JSON format, explaining the issue is returned. Otherwise, if everything is good, the rejection message will be 'null'. To build libwasmtimewrapper.so (required for proper testing): - cd plugins/git/additional-packages/wasmtime-wrapper-lib/ - nix-shell (you need to have nix installed) - cargo zigbuild --target x86_64-unknown-linux-gnu.2.17 --release To build pre-receive-hook-example.wasm (required for proper testing): - cd plugins/git/additional-packages/pre-receive-hook-example/ - nix-shell (you need to have nix installed) - cargo build --target wasm32-wasi --release To test: - tuleap config-set feature_flag_enable_pre_receive_analyze_command 1 (set the feature flag) - tuleap git:pre-receive-analyze <repo_id> <git_object_sha1> (launch the command with valid parameters) Part of story #28845 have an hidden command executing custom command to determine if the reference should have been rejected Change-Id: Iebe6d930ba46e3be6f2824d576c22add348a922a

+2240 −429

Author

Thomas Piras (tpiras) 2022-11-07 15:27

Committer

Thomas Piras (tpiras) 2022-11-28 16:38

Hash 3d2c428133f5a4e04de76b182ca1c91a588dbc56

Parent de272abfdb71e406f02023eaffe562b0e5f92498

Reference git #tuleap/stable/3d2c428133f5a4e04de76b182ca1c91a588dbc56