123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172 |
- #!/usr/bin/env python3
- #
- # Copyright (C) 2022 The Android Open Source Project
- #
- # Licensed under the Apache License, Version 2.0 (the "License");
- # you may not use this file except in compliance with the License.
- # You may obtain a copy of the License at
- #
- # http://www.apache.org/licenses/LICENSE-2.0
- #
- # Unless required by applicable law or agreed to in writing, software
- # distributed under the License is distributed on an "AS IS" BASIS,
- # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- # See the License for the specific language governing permissions and
- # limitations under the License.
- import argparse
- import hashlib
- import os.path
- import sys
- import google.protobuf.text_format as text_format
- import provenance_metadata_pb2
- def Log(*info):
- if args.verbose:
- for i in info:
- print(i)
- def ParseArgs(argv):
- parser = argparse.ArgumentParser(description='Create provenance metadata for a prebuilt artifact')
- parser.add_argument('-v', '--verbose', action='store_true', help='Print more information in execution')
- parser.add_argument('--module_name', help='Module name', required=True)
- parser.add_argument('--artifact_path', help='Relative path of the prebuilt artifact in source tree', required=True)
- parser.add_argument('--install_path', help='Absolute path of the artifact in the filesystem images', required=True)
- parser.add_argument('--metadata_path', help='Path of the provenance metadata file created for the artifact', required=True)
- return parser.parse_args(argv)
- def main(argv):
- global args
- args = ParseArgs(argv)
- Log("Args:", vars(args))
- provenance_metadata = provenance_metadata_pb2.ProvenanceMetadata()
- provenance_metadata.module_name = args.module_name
- provenance_metadata.artifact_path = args.artifact_path
- provenance_metadata.artifact_install_path = args.install_path
- Log("Generating SHA256 hash")
- h = hashlib.sha256()
- with open(args.artifact_path, "rb") as artifact_file:
- h.update(artifact_file.read())
- provenance_metadata.artifact_sha256 = h.hexdigest()
- Log("Check if there is attestation for the artifact")
- attestation_file_name = args.artifact_path + ".intoto.jsonl"
- if os.path.isfile(attestation_file_name):
- provenance_metadata.attestation_path = attestation_file_name
- text_proto = [
- "# proto-file: build/soong/provenance/proto/provenance_metadata.proto",
- "# proto-message: ProvenanceMetaData",
- "",
- text_format.MessageToString(provenance_metadata)
- ]
- with open(args.metadata_path, "wt") as metadata_file:
- file_content = "\n".join(text_proto)
- Log("Writing provenance metadata in textproto:", file_content)
- metadata_file.write(file_content)
- if __name__ == '__main__':
- main(sys.argv[1:])
|