feature: introduce gatekeeper commands which will be executed prior the command

Signed-off-by: Maximilian Bösing <[email protected]>

Author: boesing

README.md

@@ -39,6 +39,11 @@ The JSON string should represent an object with the following information:
   "command": "command to run to perform the check (empty in case you dont want to excecute any command)",
   "additional_composer_arguments": [
     "arguments which will be passed to `composer install` or `composer update`, passed as a list or as a list; e.g. --no-scripts"
+  ],
+  "gatekeeper_commands": [
+    "tool configuration linting",
+    "tool specific setting overrides",
+    "specific composer dependency to be installed prior executing command"
   ]
 }
 ```

entrypoint.sh

@@ -1,6 +1,7 @@
 #!/bin/bash
 
 set -e
+set -o pipefail
 
 function help {
     echo "$0 <JSON>"
@@ -14,6 +15,7 @@ function help {
     echo " - dependencies:                    the dependency set to run against (lowest, latest, locked)"
     echo " - ignore_php_platform_requirement: flag to enable/disable the PHP platform requirement when executing composer \`install\` or \`update\`"
     echo " - additional_composer_arguments:   a list of composer arguments to be added when \`install\` or \`update\` is called."
+    echo " - gatekeeper_commands:             a list of commands to run prior the real command"
     echo ""
 }
 
@@ -138,6 +140,8 @@ if [[ "${PHP}" == "" ]];then
     exit 1
 fi
 
+readarray -t GATEKEEPER_COMMANDS=$(echo "${JOB}" | jq -rc '(.gatekeeper_commands // [])[]' )
+
 echo "Marking PHP ${PHP} as configured default"
 update-alternatives --quiet --set php "/usr/bin/php${PHP}"
 update-alternatives --quiet --set php-config "/usr/bin/php-config${PHP}"
@@ -216,6 +220,11 @@ if [ -x ".laminas-ci/pre-run.sh" ];then
     ./.laminas-ci/pre-run.sh testuser "${PWD}" "${JOB}"
 fi
 
+# Execute gatekeeper commands before executing the CI command
+for GATEKEEPER_COMMAND in "${GATEKEEPER_COMMANDS[@]}"; do
+  sudo --preserve-env --set-home -u testuser /bin/bash -c "${GATEKEEPER_COMMAND}"
+done
+
 # Disable exit-on-non-zero flag so we can run post-commands
 set +e