#!/usr/bin/env bash
set -euo pipefail
source "$(dirname -- "${BASH_SOURCE[0]}")/engine.sh"
[[ $# == 1 && "$1" =~ ^[a-z0-9][a-z0-9_.-]*/[a-z0-9][a-z0-9_.-]*$ ]] || {
    echo "Usage: $0 lowercase-owner/lowercase-repository" >&2; exit 2;
}
"$ENGINE" exec --user git "$CONTAINER" sh -eu -c '
    repo="/data/git/repositories/$1.git"
    test -f "$repo/HEAD"
    test -x "$repo/hooks/pre-receive"
    mkdir -p "$repo/hooks/pre-receive.d"
    cp /opt/gitleaks/templates/hooks/pre-receive.d/20-gitleaks "$repo/hooks/pre-receive.d/20-gitleaks"
    chmod 755 "$repo/hooks/pre-receive.d/20-gitleaks"
' sh "$1"
echo "Gitleaks enabled for $1"