make_pr.sh

#! /bin/bash

ANSI_RED="\033[31;1m"
ANSI_GREEN="\033[32;1m"
ANSI_RESET="\033[0m"
ANSI_CLEAR="\033[0K"

EXIT_SUCCESS=0
EXIT_SOURCE_NOT_FOUND=1
EXIT_SOURCE_HAS_SETUID=2
EXIT_NOTHING_TO_COMMIT=3
EXIT_DUPLICATE_EXISTS=4

DEFAULT_BRANCH=master

create_pr=0
has_setuid=0

function notice() {
	msg=$1
	echo -e "\n${ANSI_GREEN}${msg}${ANSI_RESET}\n"
}

function warn() {
	msg=$1
	echo -e "\n${ANSI_RED}${msg}${ANSI_RESET}\n"
}

function usage() {
	echo "Usage: $0 [-y] repo issue_number dist [package [additional_packages …]]"
}

while getopts "sy" opt; do
	case "$opt" in
	s)
		has_setuid=1
		;;
	y)
		create_pr=1
		;;
	esac
done

shift $((OPTIND-1))

if [ $# -lt 3 ]; then
	usage
	exit 0
fi

## Process arguments; nothing funcy

ISSUE_REPO=$1
shift
ISSUE_NUMBER=$1
shift
DIST=$1
shift

PACKAGES=( $@ )
if [ -z "$PACKAGES"  ]; then
	if [ -f $(dirname $0)/packages ]; then
		notice "Reading from $(dirname $0)/packages"
		PACKAGES=$(< $(dirname $0)/packages)
	else
		warn "Unable to determine packages to add"
		usage
		exit 1
	fi
fi

# This will contain "<package_name> in <dist>"
ISSUE_PACKAGE="$(echo $PACKAGES | cut -f1 -d' ') in ${DIST}"

### Search for an existing PR
SEARCH_URL="https://api.github.com/search/issues?q=repo:travis-ci/$ISSUE_REPO+type:pr+is:open+%s"

curl -s -X GET $(printf $SEARCH_URL $ISSUE_PACKAGE) > search_results.json

HITS=$(jq < search_results.json '.total_count')

current=0
while [ $current -lt $HITS ]; do
	# This will set CANDIDATE_PACKAGE to "<package_name> in <dist>" or "<package_name>"
	CANDIDATE_PACKAGE=$(  jq -r < search_results.json ".items | .[$current] | .title | scan(\"Pull request for (.*)$\") [0]")
	CANDIDATE_PR_NUMBER=$(jq -r < search_results.json ".items | .[$current] | .body  | scan(\"Resolves [^#]+#(?<number>[0-9]+)\") [0]")
	# check if ${DIST} is present
	echo $CANDIDATE_PACKAGE | grep -q -E " in [[:alnum:]]*$"
	if [ $? -gt 0]; then
		# it isn't, so assume it's meant for precise
		CANDIDATE_PACKAGE=$(echo $CANDIDATE_PACKAGE " in precise")
	fi

	if [[ z${CANDIDATE_PACKAGE} = z${ISSUE_PACKAGE} && z$CANDIDATE_PR_NUMBER != z$ISSUE_NUMBER ]]; then
		# duplicate is found. Close the issue
		echo "${ANSI_RED}This is a duplicate request${ANSI_RESET}"
		curl -X POST -d "{\"body\":\"Duplicate of travis-ci/$ISSUE_REPO#$CANDIDATE_PR_NUMBER\"}" \
			-H "Content-Type: application/json" -H "Authorization: token ${GITHUB_OAUTH_TOKEN}" \
			https://api.github.com/repos/travis-ci/$ISSUE_REPO/issues/$ISSUE_NUMBER/comments
		curl -X PATCH -d "{\"state\":\"closed\"}" \
			-H "Content-Type: application/json" -H "Authorization: token ${GITHUB_OAUTH_TOKEN}" \
			https://api.github.com/repos/travis-ci/$ISSUE_REPO/issues/$ISSUE_NUMBER
		exit $EXIT_DUPLICATE_EXISTS
	fi
	let current=$current+1
done

notice "Setting up PR with\nRepo: ${ISSUE_REPO}\nNUMBER: ${ISSUE_NUMBER}\nPackages: ${PACKAGES[*]}\nDIST: ${DIST}"

BRANCH="test-${ISSUE_REPO}-${ISSUE_NUMBER}"
notice "Setting up Git"

if [ -z "`git config --get --global credential.helper`" ]; then
	notice "set up credential.helper"
	git config credential.helper "store --file=.git/credentials"
	echo "https://${GITHUB_OAUTH_TOKEN}:@github.com" > .git/credentials 2>/dev/null
fi
if [ -z "`git config --get --global user.email`" ]; then
	notice "set up user.email"
	git config --global user.email "contact@travis-ci.com"
fi
if [ -z "`git config --get --global user.name`" ]; then
	notice "set up user.name"
	git config --global user.name "Travis CI APT package tester"
fi

notice "Creating commit"
git checkout $DEFAULT_BRANCH
git checkout -b $BRANCH
for p in ${PACKAGES[*]}; do
	notice "Adding ${p}"
	env PACKAGE=${p} DISTRO=ubuntu-${DIST} make add > /dev/null
done
git add ubuntu-${DIST}
git commit -m "Add ${ISSUE_PACKAGE} to ubuntu-${DIST}; resolves travis-ci/${ISSUE_REPO}#${ISSUE_NUMBER}

Packages: ${PACKAGES}"

COMMIT_EXIT_STATUS=$?
if [ $COMMIT_EXIT_STATUS -gt 0 ]; then
	notice "Nothing to commit"
	exit $EXIT_NOTHING_TO_COMMIT
fi

notice "Pushing commit"

if [ -z $GITHUB_OAUTH_TOKEN ]; then
	warn '$GITHUB_OAUTH_TOKEN not set'
	exit 1
fi
git push origin $BRANCH

if [ $create_pr -le 0 ]; then
	# bail before creating a pr
	exit 0
fi

notice "Creating PR"
COMMENT="Add packages: ${PACKAGES[*]}"
if [ -n ${TRAVIS_BUILD_ID} ]; then
	COMMENT="${COMMENT}\n\nSee http://travis-ci.org/${TRAVIS_REPO_SLUG}/builds/${TRAVIS_BUILD_ID}."
fi
if [ ${has_setuid} -gt 0 ]; then
	COMMENT="\n\n***NOTE***\n\nsetuid/seteuid/setgid bits were found. Be sure to check the build result.\n\n${COMMENT}"
fi


curl -X POST -fsS -H "Content-Type: application/json" -H "Authorization: token ${GITHUB_OAUTH_TOKEN}" \
	-d "{\"title\":\"Pull request for ${ISSUE_PACKAGE}\",\"body\":\"Resolves travis-ci/${ISSUE_REPO}#${ISSUE_NUMBER}.\n${COMMENT}\",\"head\":\"${BRANCH}\",\"base\":\"master\"}" \
	https://api.github.com/repos/travis-ci/apt-package-safelist/pulls > pr_payload
if [ $? -eq 0 -a ${has_setuid} -gt 0 ]; then
	curl -X POST -fsS -H "Content-Type: application/json" -H "Authorization: token ${GITHUB_OAUTH_TOKEN}" \
		-d "[\"textual-suid-present\"]" \
		$(jq .issue_url pr_payload | cut -f2 -d\")/labels
fi
curl -X POST -fsS -H "Content-Type: application/json" -H "Authorization: token ${GITHUB_OAUTH_TOKEN}" \
	-d "[\"apt-safelist-check-run\"]" \
	https://api.github.com/repos/travis-ci/${ISSUE_REPO}/issues/${ISSUE_NUMBER}/labels

git checkout $DEFAULT_BRANCH
git branch -D $BRANCH