#!/bin/bash

# Slackware build script for gitleaks
# Copyright (c) 2026 Moletastic
#
# Permission is hereby granted, free of charge, to any person obtaining a
# copy of this software and associated documentation files (the "Software"),
# to deal in the Software without restriction, including without limitation
# the rights to use, copy, modify, merge, publish, distribute, sublicense,
# and/or sell copies of the Software, and to permit persons to whom the
# Software is furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included
# in all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
# OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
# IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
# CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
# TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
# SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

cd $(dirname $0) ; CWD=$(pwd)

PRGNAM=gitleaks
VERSION=${VERSION:-8.30.1}
BUILD=${BUILD:-1}
TAG=${TAG:-_SBo}
PKGTYPE=${PKGTYPE:-tgz}

if [ -z "$ARCH" ]; then
  case "$(uname -m)" in
    i?86) ARCH=i586 ;;
    arm*) ARCH=arm ;;
       *) ARCH=$(uname -m) ;;
  esac
fi

if [ -n "$PRINT_PACKAGE_NAME" ]; then
  echo "$PRGNAM-$VERSION-$ARCH-$BUILD$TAG.$PKGTYPE"
  exit 0
fi

TMP=${TMP:-/tmp/SBo}
PKG=$TMP/package-$PRGNAM
OUTPUT=${OUTPUT:-/tmp}

set -e

rm -rf "$PKG"
mkdir -p "$TMP" "$PKG" "$OUTPUT"

cd "$TMP"
rm -rf "$PRGNAM-$VERSION"
tar xvf "$CWD/$PRGNAM-$VERSION.tar.gz"
cd "$PRGNAM-$VERSION"
tar xvf "$CWD/$PRGNAM-$VERSION-vendor.tar.gz"

chown -R root:root .
find . ! -type l \( \
  \( -perm 777 -o -perm 775 -o -perm 750 -o -perm 711 -o -perm 555 \
     -o -perm 511 \) -exec chmod 755 {} \+ -o \
  \( -perm 666 -o -perm 664 -o -perm 640 -o -perm 600 -o -perm 444 \
     -o -perm 440 -o -perm 400 \) -exec chmod 644 {} \+ \)

export CGO_ENABLED=0
export GOTOOLCHAIN=local
export GOPROXY=off
export GOSUMDB=off
export GOWORK=off
export GOPATH="$TMP/go-$PRGNAM"
export GOCACHE="$TMP/go-cache-$PRGNAM"

# Match upstream releases' embedded RE2 engine without system RE2 or cgo.
go build \
  -mod=vendor \
  -buildvcs=false \
  -trimpath \
  -tags=gore2regex \
  -ldflags="-s -w -X github.com/zricethezav/gitleaks/v8/version.Version=$VERSION" \
  -o gitleaks .

install -D -m 0755 gitleaks "$PKG/usr/bin/gitleaks"

mkdir -p "$PKG/usr/doc/$PRGNAM-$VERSION"
cp -a LICENSE README.md config/gitleaks.toml report_templates \
  "$PKG/usr/doc/$PRGNAM-$VERSION/"
cat "$CWD/$PRGNAM.SlackBuild" \
  > "$PKG/usr/doc/$PRGNAM-$VERSION/$PRGNAM.SlackBuild"

# Preserve license notices for bundled Go and WebAssembly dependencies.
mkdir -p "$PKG/usr/doc/$PRGNAM-$VERSION/licenses"
find vendor -type f \
  \( -iname 'license*' -o -iname 'copying*' -o -iname 'notice*' \
     -o -iname 'copyright*' \) \
  -exec cp --parents -t "$PKG/usr/doc/$PRGNAM-$VERSION/licenses/" {} \+

mkdir -p "$PKG/install"
cat "$CWD/slack-desc" > "$PKG/install/slack-desc"

cd "$PKG"
/sbin/makepkg -l y -c n "$OUTPUT/$PRGNAM-$VERSION-$ARCH-$BUILD$TAG.$PKGTYPE"