Pre-receive hooks

devops_account

Hi, I'm using ScriptRunner to write a Pre-receive hook. In this customized script, I used the matchingChangsCollector. But there is an error show - 

[Static type checking] - Cannot call java.util.Collection #pathsMatch(com.atlassian.bitbucket.repository.Repository, java.lang.String, groovy.lang.Closure ) with arguments [com.atlassian.bitbucket.repository.Repository, java.lang.String, groovy.lang.Closure ] @ line 24, column 5.

 

Basically, I just used the sample code from - https://scriptrunner.adaptavist.com/5.6.3/bitbucket/

 

import com.atlassian.bitbucket.content.Change

import com.atlassian.bitbucket.repository.RefChange

import com.atlassian.bitbucket.repository.Repository

 

def repository = repository as Repository
def refChanges = refChanges as Collection<RefChange>
def hookMsg = ""

def matchingChangesCollector = { Iterable<Change> matchingChanges ->
hookMsg << "The following changes containing private ssh keys were blocked:\n"

matchingChanges.each { change ->
def message = "Id: ${shortId(change.contentId)}, Path: ${change.path.toString()}\n"

hookMsg << message
}
}

 

refChanges.pathsMatch(repository, "glob:id_rsa", matchingChangesCollector)

private String shortId(String contentId) {
contentId.substring(0, 11)
}

 

Thank you,

Jason

Mark Ryan_nzmwos

Hi 

 

Just came across your post whilst looking for something else and it struck me that you might be trying to implement a 'Custom Script Hook' whereby the example you quote in your original post was actually a script/condition for a 'Protect git refs' Pre Hook.

 

If you want to implement your script above as a 'Custom' Hook, then you'll need to explicitly return true/false plus a veto message. I have modified your script in order to make it work as a 'Custom' Hook:

 

import com.atlassian.bitbucket.content.Change
import com.onresolve.scriptrunner.canned.bitbucket.util.BitbucketCannedScriptUtils

def repository = repository as Repository
def refChanges = refChanges as Collection<RefChange>

def matchingChangesCollector = { Iterable<Change> matchingChanges ->
  hookMessage << "The following changes containing private ssh keys were blocked:\n"
  matchingChanges.each { change ->
    hookMessage << "Id: ${shortId(change.contentId)}, Path: ${change.path.toString()}\n"
  }
}

if ( refChanges.pathsMatch(repository, "glob:id_rsa", matchingChangesCollector) ) {
  hookResponse.out().print(BitbucketCannedScriptUtils.wrapHookResponse(hookMessage))
  return false
}

private String shortId(String contentId) {
  contentId.substring(0, 11)
} 

 

The changes I have made here:

* Use the available binding variable for 'hookMessage' (just saves defining your own message as a StringBuilder).

* Wrap the hookMessage with 'wrapHookResponse' for prettier output.

* If there are any changes that need to be blocked, then write the message to the 'hookResponse.out()' method and return false.

 

To implement the above script:

Bitbucket -> Administration -> Pre Hooks -> Add New Item -> Custom Script Hook ... 

 

 

Hope this helps.

Regards

Mark

 

PS. I see the 'Static type checking' quite often and in this case I believe it is a bit of a red-herring and can be ignored .. as annoying as it is ..