;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2019, 2020 Ludovic Courtès <ludo@gnu.org>
;;; Copyright © 2020 Tobias Geerinckx-Rice <me@tobias.gr>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

;;;
;;; Authenticate a range of commits.
;;;

(use-modules (git)
             (guix base16)
             (guix git)
             (guix git-authenticate)
             (guix channels)
             (guix i18n)
             ((guix openpgp)
              #:select (openpgp-public-key-fingerprint
                        openpgp-format-fingerprint))
             (guix progress)
             (srfi srfi-1)
             (srfi srfi-26)
             (ice-9 match)
             (ice-9 format)
             (ice-9 pretty-print))



(define %commits-with-bad-signature
  ;; Commits with a known-bad signature.
  '("6a34f4ccc8a5d4a48e25ad3c9c512f8634928b91"))  ;2016-12-29

(define %unsigned-commits
  ;; Commits lacking a signature.
  '())


;;;
;;; Entry point.
;;;

(define (git-authenticate args)
  (let loop ((args args))
    (match args
      ((_ start end)
       (authenticate-channel (car %default-channels) "." end
                             ;; Require users to have a local 'keyring'
                             ;; branch.
                             #:keyring-reference-prefix ""))
      ((command start)
       (let* ((repository (repository-open "."))
              (head       (repository-head repository))
              (end        (oid->string (reference-target head))))
         (repository-close! repository)
         (loop (list command start end))))
      (_
       (format (current-error-port)
               (G_ "Usage: git-authenticate START [END]

Authenticate commits START to END or the current head.\n"))))))