feat(ggshield-configuration): Add optional 'allow self signed' option for certificates

Author: salome-voltz

package.json

@@ -34,6 +34,11 @@
           "type": "string",
           "default": "",
           "markdownDescription": "Your API Key"
+        },
+        "gitguardian.allowSelfSigned": {
+          "type": "boolean",
+          "default": false,
+          "markdownDescription": "Allow Self Signed Certificates"
         }
       }
     },

src/lib/ggshield-configuration.ts

@@ -8,15 +8,18 @@ export class GGShieldConfiguration {
   ggshieldPath: string;
   apiUrl: string;
   apiKey: string;
+  allowSelfSigned: boolean;
 
   constructor(
     ggshieldPath: string = "",
     apiUrl: string = "",
-    apiKey: string = ""
+    apiKey: string = "",
+    allowSelfSigned: boolean = false
   ) {
     this.ggshieldPath = ggshieldPath;
     this.apiUrl = apiUrl;
     this.apiKey = apiKey;
+    this.allowSelfSigned = allowSelfSigned;
   }
 }
 
@@ -34,13 +37,15 @@ export function getConfiguration(
   const ggshieldPath: string | undefined = config.get("GGShieldPath");
   const apiUrl: string | undefined = config.get("apiUrl");
   const apiKey: string | undefined = config.get("apiKey");
+  const allowSelfSigned: boolean = config.get("allowSelfSigned", false);
 
   return new GGShieldConfiguration(
     ggshieldPath
       ? ggshieldPath
       : getBinaryAbsolutePath(os.platform(), os.arch(), context),
     apiUrl ? apiUrl : apiUrlDefault,
-    apiKey ? apiKey : ""
+    apiKey ? apiKey : "",
+    allowSelfSigned ? allowSelfSigned : false
   );
 }
 

src/lib/run-ggshield.ts

@@ -41,6 +41,10 @@ export function runGGShieldCommand(
   if (workspace.workspaceFolders?.length || 0 > 0) {
     options["cwd"] = workspace.workspaceFolders![0].uri.fsPath;
   }
+  // if allowSelfSigned is enabled, add the --allow-self-signed flag
+  if (configuration.allowSelfSigned) {
+    args = ["--allow-self-signed"].concat(args);
+  }
   let proc = spawnSync(ggshieldPath, args, options);
 
   return proc;