freelabz · ocervell · Apr 29, 2025 · Feb 28, 2025 · Mar 10, 2025 · Apr 18, 2025
diff --git a/.docker/Dockerfile.alpine b/.docker/Dockerfile.alpine
@@ -21,6 +21,7 @@ RUN pipx install --pip-args="--no-cache-dir" . && \
 
 FROM python:3.12-alpine
 ARG flavor=full
+ARG build_from_source=false
 ENV TERM="xterm-256color"
 ENV PATH="${PATH}:/root/.local/bin"
 ENV GOBIN="/root/.local/bin"
@@ -29,5 +30,6 @@ RUN apk add --no-cache \
 	flock \
 	pipx \
 	sudo
+RUN if [ "$build_from_source" = "true" ]; then secator config set security.force_source_install 1; fi
 RUN if [ "$flavor" != "lite" ]; then secator install tools --cleanup --fail-fast; fi
 ENTRYPOINT ["secator"]
diff --git a/.docker/Dockerfile.arch b/.docker/Dockerfile.arch
@@ -31,6 +31,6 @@ RUN pipx install . && \
 	secator install addons mongodb && \
 	secator install addons redis && \
 	secator install addons dev
-RUN secator config set security.force_source_install true
-RUN secator install tools --cleanup --fail-fast
+RUN if [ "$build_from_source" = "true" ]; then secator config set security.force_source_install 1; fi
+RUN if [ "$flavor" != "lite" ]; then secator install tools --cleanup --fail-fast; fi
 ENTRYPOINT ["secator"]
diff --git a/.docker/Dockerfile.debian b/.docker/Dockerfile.debian
@@ -33,6 +33,6 @@ RUN pipx install . && \
 	secator install addons redis && \
 	secator install addons dev
 RUN secator install langs go
-RUN secator config set security.force_source_install true
-RUN secator install tools --cleanup --fail-fast
+RUN if [ "$build_from_source" = "true" ]; then secator config set security.force_source_install 1; fi
+RUN if [ "$flavor" != "lite" ]; then secator install tools --cleanup --fail-fast; fi
 ENTRYPOINT ["secator"]
diff --git a/.docker/Dockerfile.kali b/.docker/Dockerfile.kali
@@ -32,6 +32,6 @@ RUN pipx install . && \
 	secator install addons mongodb && \
 	secator install addons redis && \
 	secator install addons dev
-RUN secator config set security.force_source_install true
-RUN secator install tools --cleanup --fail-fast
+RUN if [ "$build_from_source" = "true" ]; then secator config set security.force_source_install 1; fi
+RUN if [ "$flavor" != "lite" ]; then secator install tools --cleanup --fail-fast; fi
 ENTRYPOINT ["secator"]
diff --git a/.docker/Dockerfile.osx b/.docker/Dockerfile.osx
@@ -35,6 +35,6 @@ RUN pipx install . && \
 	secator install addons mongodb && \
 	secator install addons redis && \
 	secator install addons dev
-RUN secator config set security.force_source_install true
-RUN secator install tools --cleanup --fail-fast
+RUN if [ "$build_from_source" = "true" ]; then secator config set security.force_source_install 1; fi
+RUN if [ "$flavor" != "lite" ]; then secator install tools --cleanup --fail-fast; fi
 ENTRYPOINT ["secator"]
diff --git a/.docker/Dockerfile.ubuntu b/.docker/Dockerfile.ubuntu
@@ -32,6 +32,6 @@ RUN pipx install . && \
 	secator install addons mongodb && \
 	secator install addons redis && \
 	secator install addons dev
-RUN secator config set security.force_source_install true
-RUN secator install tools --cleanup --fail-fast
+RUN if [ "$build_from_source" = "true" ]; then secator config set security.force_source_install 1; fi
+RUN if [ "$flavor" != "lite" ]; then secator install tools --cleanup --fail-fast; fi
 ENTRYPOINT ["secator"]
diff --git a/.github/workflows/new_or_updated_task.yml b/.github/workflows/new_or_updated_task.yml
@@ -0,0 +1,56 @@
+name: Tasks
+
+on:
+  push:
+    paths:
+      - 'secator/tasks/*.py'
+    branches:
+      - release-please*
+  pull_request:
+    types: [labeled, synchronize]
+    paths:
+      - 'secator/tasks/*.py'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test-tasks:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        # os: ["ubuntu-latest", "macos-latest"]
+        os: ["ubuntu-latest"]
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v3
+      with:
+        fetch-depth: 0
+
+    - name: Install secator
+      uses: ./.github/actions/install
+      with:
+        python-version: ${{ matrix.python-version }}
+
+    - name: Detect changed or all tasks
+      run: |
+        if [[ ${{ github.event_name }} == "push" && ${{ github.ref_name }} =~ ^release-please.* ]]; then
+          TASKS=$(secator x --list)
+          echo "Running all tasks"
+        else
+          TASKS=$(git diff --name-only --diff-filter=AMR origin/main HEAD | grep '^secator/tasks/.*\.py$' | grep -v '_.*\.py$' | sed 's/\.py$//' | sed 's/^secator\/tasks\///')
+          echo "Changed tasks: $TASKS"
+        fi
+
+        FAILED=0
+        for task in $TASKS; do
+          if ! secator test task -c $task; then
+            FAILED=1
+          fi
+          echo ""
+        done
+        if [ $FAILED -eq 1 ]; then
+          exit 1
+        fi