Initial commit

.github/workflows/ci.yaml

@@ -0,0 +1,38 @@
+name: ci
+on: pull_request
+jobs:
+  go-lint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Install Go
+        uses: actions/setup-go@v4
+        with:
+          go-version: 1.20.x
+      - name: Checkout code
+        uses: actions/checkout@v3
+      - name: Run linters
+        uses: golangci/golangci-lint-action@v3
+        with:
+          version: latest
+          args: --timeout=3m
+  go-test:
+    strategy:
+      matrix:
+        go-version: [1.20.x]
+        platform: [ubuntu-latest]
+    runs-on: ${{ matrix.platform }}
+    steps:
+      - name: Install Go
+        if: success()
+        uses: actions/setup-go@v4
+        with:
+          go-version: ${{ matrix.go-version }}
+      - name: Checkout code
+        uses: actions/checkout@v3
+      - name: go tests
+        run: go test -v -covermode=count -json ./... > test.json
+      - name: annotate go tests
+        if: always()
+        uses: guyarb/golang-test-annotations@v0.5.1
+        with:
+          test-results: test.json

.github/workflows/main.yaml

@@ -0,0 +1,41 @@
+name: main ci
+on:
+  push:
+    branches:
+      - main
+jobs:
+  go-lint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Install Go
+        uses: actions/setup-go@v4
+        with:
+          go-version: 1.20.x
+      - name: Checkout code
+        uses: actions/checkout@v3
+      - name: Run linters
+        uses: golangci/golangci-lint-action@v3
+        with:
+          version: latest
+          args: --timeout=3m
+  go-test:
+    strategy:
+      matrix:
+        go-version: [ 1.20.x ]
+        platform: [ ubuntu-latest ]
+    runs-on: ${{ matrix.platform }}
+    steps:
+      - name: Install Go
+        if: success()
+        uses: actions/setup-go@v4
+        with:
+          go-version: ${{ matrix.go-version }}
+      - name: Checkout code
+        uses: actions/checkout@v3
+      - name: go tests
+        run: go test -v -covermode=count -json ./... > test.json
+      - name: annotate go tests
+        if: always()
+        uses: guyarb/golang-test-annotations@v0.5.1
+        with:
+          test-results: test.json

.github/workflows/release.yaml

@@ -0,0 +1,60 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - '*'
+
+jobs:
+  goreleaser:
+    runs-on: macos-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
+      - name: Set up Go
+        uses: actions/setup-go@v4
+        with:
+          go-version: 1.20.x
+      - name: Set up Gon
+        run: brew tap mitchellh/gon && brew install mitchellh/gon/gon
+      - name: Import Keychain Certs
+        uses: apple-actions/import-codesign-certs@v1
+        with:
+          p12-file-base64: ${{ secrets.APPLE_SIGNING_KEY_P12 }}
+          p12-password: ${{ secrets.APPLE_SIGNING_KEY_P12_PASSWORD }}
+      - name: Run GoReleaser
+        uses: goreleaser/goreleaser-action@v4
+        with:
+          version: latest
+          args: release --clean
+        env:
+          GITHUB_TOKEN: ${{ secrets.RELENG_GITHUB_TOKEN }}
+          AC_PASSWORD: ${{ secrets.AC_PASSWORD }}
+  goreleaser-docker:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
+      - name: Set up Go
+        uses: actions/setup-go@v4
+        with:
+          go-version: 1.20.x
+      - name: Docker Login
+        uses: docker/login-action@v1
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.RELENG_GITHUB_TOKEN }}
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v1
+      - name: Run GoReleaser
+        uses: goreleaser/goreleaser-action@v4
+        with:
+          version: latest
+          args: release --clean -f .goreleaser.docker.yaml
+        env:
+          GITHUB_TOKEN: ${{ secrets.RELENG_GITHUB_TOKEN }}

.gitignore

@@ -0,0 +1,17 @@
+# Binaries for programs and plugins
+*.exe
+*.exe~
+*.dll
+*.so
+*.dylib
+*.c1z
+
+# Test binary, built with `go test -c`
+*.test
+
+# Output of the go coverage tool, specifically when used with LiteIDE
+*.out
+
+# Dependency directories (remove the comment below to include it)
+# vendor/
+dist/

.golangci.yml

@@ -0,0 +1,107 @@
+linters-settings:
+  exhaustive:
+    default-signifies-exhaustive: true
+
+  gocritic:
+    # The list of supported checkers can be find in https://go-critic.github.io/overview.
+    settings:
+      underef:
+        # Whether to skip (*x).method() calls where x is a pointer receiver.
+        skipRecvDeref: false
+
+  govet:
+    enable-all: true
+    disable:
+      - fieldalignment # too strict
+      - shadow # complains too much about shadowing errors. All research points to this being fine.
+
+  nakedret:
+    max-func-lines: 0
+
+  nolintlint:
+    allow-no-explanation: [ forbidigo, tracecheck, gomnd, gochecknoinits, makezero ]
+    require-explanation: true
+    require-specific: true
+
+  revive:
+    ignore-generated-header: true
+    severity: error
+    rules:
+      - name: atomic
+      - name: line-length-limit
+        arguments: [ 200 ]
+      # These are functions that we use without checking the errors often. Most of these can't return an error even
+      # though they implement an interface that can.
+      - name: unhandled-error
+        arguments:
+          - fmt.Printf
+          - fmt.Println
+          - fmt.Fprintf
+          - fmt.Fprintln
+          - os.Stderr.Sync
+          - sb.WriteString
+          - buf.WriteString
+          - hasher.Write
+          - os.Setenv
+          - os.RemoveAll
+      - name: var-naming
+        arguments: [["ID", "URL", "HTTP", "API"], []]
+
+  tenv:
+    all: true
+
+  varcheck:
+    exported-fields: false # this appears to improperly detect exported variables as unused when they are used from a package with the same name
+
+
+linters:
+  disable-all: true
+  enable:
+    - deadcode # Finds unused code
+    - errcheck # Errcheck is a program for checking for unchecked errors in go programs. These unchecked errors can be critical bugs in some cases
+    - gosimple # Linter for Go source code that specializes in simplifying a code
+    - govet # Vet examines Go source code and reports suspicious constructs, such as Printf calls whose arguments do not align with the format string
+    - ineffassign # Detects when assignments to existing variables are not used
+    - staticcheck # Staticcheck is a go vet on steroids, applying a ton of static analysis checks
+    - typecheck # Like the front-end of a Go compiler, parses and type-checks Go code
+    - unused # Checks Go code for unused constants, variables, functions and types
+    - varcheck # Finds unused global variables and constants
+    - asasalint # Check for pass []any as any in variadic func(...any)
+    - asciicheck # Simple linter to check that your code does not contain non-ASCII identifiers
+    - bidichk # Checks for dangerous unicode character sequences
+    - bodyclose # checks whether HTTP response body is closed successfully
+    - durationcheck # check for two durations multiplied together
+    - errorlint # errorlint is a linter for that can be used to find code that will cause problems with the error wrapping scheme introduced in Go 1.13.
+    - execinquery # execinquery is a linter about query string checker in Query function which reads your Go src files and warning it finds
+    - exhaustive # check exhaustiveness of enum switch statements
+    - exportloopref # checks for pointers to enclosing loop variables
+    - forbidigo # Forbids identifiers
+    - gochecknoinits # Checks that no init functions are present in Go code
+    - goconst # Finds repeated strings that could be replaced by a constant
+    - gocritic # Provides diagnostics that check for bugs, performance and style issues.
+    - godot # Check if comments end in a period
+    - goimports # In addition to fixing imports, goimports also formats your code in the same style as gofmt.
+    - gomoddirectives # Manage the use of 'replace', 'retract', and 'excludes' directives in go.mod.
+    - goprintffuncname # Checks that printf-like functions are named with f at the end
+    - gosec # Inspects source code for security problems
+    - nakedret # Finds naked returns in functions greater than a specified function length
+    - nilerr # Finds the code that returns nil even if it checks that the error is not nil.
+    - noctx # noctx finds sending http request without context.Context
+    - nolintlint # Reports ill-formed or insufficient nolint directives
+    - nonamedreturns # Reports all named returns
+    - nosprintfhostport # Checks for misuse of Sprintf to construct a host with port in a URL.
+    - predeclared # find code that shadows one of Go's predeclared identifiers
+    - revive # Fast, configurable, extensible, flexible, and beautiful linter for Go. Drop-in replacement of golint.
+    - tenv # tenv is analyzer that detects using os.Setenv instead of t.Setenv since Go1.17
+    - tparallel # tparallel detects inappropriate usage of t.Parallel() method in your Go test codes
+    - unconvert # Remove unnecessary type conversions
+    - usestdlibvars # detect the possibility to use variables/constants from the Go standard library
+    - whitespace # Tool for detection of leading and trailing whitespace
+
+issues:
+  max-same-issues: 50
+
+  exclude-rules:
+    # Don't require TODO comments to end in a period
+    - source: "(TODO)"
+      linters: [ godot ]

.gon-amd64.json

@@ -0,0 +1,14 @@
+{
+  "source": ["./dist/macos-amd64_darwin_amd64_v1/baton-onelogin"],
+  "bundle_id": "com.conductorone.baton-onelogin",
+  "apple_id": {
+    "username" : "justin.gallardo@conductorone.com",
+    "password":  "@env:AC_PASSWORD"
+  },
+  "sign": {
+    "application_identity": "Developer ID Application: Justin Gallardo (858DKH55XL)"
+  },
+  "zip" :{
+    "output_path":  "./dist/baton-onelogin-darwin-amd64.signed.zip"
+  }
+}

.gon-arm64.json

@@ -0,0 +1,14 @@
+{
+  "source": ["./dist/macos-arm64_darwin_arm64/baton-onelogin"],
+  "bundle_id": "com.conductorone.baton-onelogin",
+  "apple_id": {
+    "username" : "justin.gallardo@conductorone.com",
+    "password":  "@env:AC_PASSWORD"
+  },
+  "sign": {
+    "application_identity": "Developer ID Application: Justin Gallardo (858DKH55XL)"
+  },
+  "zip" :{
+    "output_path":  "./dist/baton-onelogin-darwin-arm64.signed.zip"
+  }
+}

.goreleaser.docker.yaml

@@ -0,0 +1,54 @@
+project_name: baton-onelogin
+builds:
+  - binary: baton-onelogin
+    env:
+      - CGO_ENABLED=0
+    id: linux
+    main: ./cmd/baton-onelogin
+    goos:
+      - linux
+    goarch:
+      - amd64
+      - arm64
+dockers:
+  - use: buildx
+    goos: linux
+    goarch: amd64
+    image_templates:
+      - "ghcr.io/conductorone/baton-onelogin:{{ .Version }}-amd64"
+      - "ghcr.io/conductorone/baton-onelogin:latest-amd64"
+    build_flag_templates:
+      - "--platform=linux/amd64"
+      - "--label=org.opencontainers.image.created={{.Date}}"
+      - "--label=org.opencontainers.image.title=baton-onelogin"
+      - "--label=org.opencontainers.image.revision={{.FullCommit}}"
+      - "--label=org.opencontainers.image.version={{.Version}}"
+      - "--label=org.opencontainers.image.source=https://github.com/conductorone/baton-onelogin"
+  - use: buildx
+    goos: linux
+    goarch: arm64
+    image_templates:
+      - "ghcr.io/conductorone/baton-onelogin:{{ .Version }}-arm64"
+      - "ghcr.io/conductorone/baton-onelogin:latest-arm64"
+    build_flag_templates:
+      - "--platform=linux/arm64/v8"
+      - "--label=org.opencontainers.image.created={{.Date}}"
+      - "--label=org.opencontainers.image.title=baton-onelogin"
+      - "--label=org.opencontainers.image.revision={{.FullCommit}}"
+      - "--label=org.opencontainers.image.version={{.Version}}"
+      - "--label=org.opencontainers.image.source=https://github.com/conductorone/baton-onelogin"
+docker_manifests:
+  - name_template: ghcr.io/conductorone/baton-onelogin:{{ .Version }}
+    image_templates:
+      - ghcr.io/conductorone/baton-onelogin:{{ .Version }}-amd64
+      - ghcr.io/conductorone/baton-onelogin:{{ .Version }}-arm64
+  - name_template: ghcr.io/conductorone/baton-onelogin:latest
+    image_templates:
+      - ghcr.io/conductorone/baton-onelogin:latest-amd64
+      - ghcr.io/conductorone/baton-onelogin:latest-arm64
+checksum:
+  disable: true
+release:
+  disable: true
+changelog:
+  skip: true