cat -n .github/workflows/docker-publish.yml | head -70

#!/bin/bash
# Verify Docker action commit hashes against official GitHub releases

# We'll check the releases and tags for each Docker action repository
echo "=== Verifying docker/login-action commit hash ==="
# Hash: 28fdb31ff34708d19615a74d67103ddc2ea9725c

echo "=== Verifying docker/metadata-action commit hash ==="
# Hash: c299e40c65443455700f0fdfc63efafe5b349051

echo "=== Verifying docker/build-push-action commit hash ==="
# Hash: 9e436ba9f2d7bcd1d038c8e55d039d37896ddc5d

# Try to get release information from GitHub API for each action
for action in "login-action" "metadata-action" "build-push-action"; do
  repo="docker/${action}"
  echo ""
  echo "=== Checking releases for $repo ==="
  curl -s "https://api.github.com/repos/${repo}/releases?per_page=10" | jq -r '.[] | "\(.tag_name): \(.published_at) - Draft: \(.draft), Prerelease: \(.prerelease)"' 2>/dev/null | head -5
done

#!/bin/bash
# Get detailed release information with commit hashes

for action in "login-action" "metadata-action" "build-push-action"; do
  repo="docker/${action}"
  echo ""
  echo "=== Release details for $repo ==="
  
  # Get releases with tag names and their commit info
  curl -s "https://api.github.com/repos/${repo}/releases?per_page=20" | jq -r '.[] | "\(.tag_name): commit SHA information available"' 2>/dev/null
done

# Now let's try to find specific commits in the tags
echo ""
echo "=== Checking specific commit hashes ==="

# For login-action: 28fdb31ff34708d19615a74d67103ddc2ea9725c
echo "docker/login-action commit 28fdb31..."
curl -s "https://api.github.com/repos/docker/login-action/commits/28fdb31ff34708d19615a74d67103ddc2ea9725c" | jq -r '.commit.message, .author.date' 2>/dev/null | head -2

# For metadata-action: c299e40c65443455700f0fdfc63efafe5b349051
echo ""
echo "docker/metadata-action commit c299e40c..."
curl -s "https://api.github.com/repos/docker/metadata-action/commits/c299e40c65443455700f0fdfc63efafe5b349051" | jq -r '.commit.message, .author.date' 2>/dev/null | head -2

# For build-push-action: 9e436ba9f2d7bcd1d038c8e55d039d37896ddc5d
echo ""
echo "docker/build-push-action commit 9e436ba9..."
curl -s "https://api.github.com/repos/docker/build-push-action/commits/9e436ba9f2d7bcd1d038c8e55d039d37896ddc5d" | jq -r '.commit.message, .author.date' 2>/dev/null | head -2

#!/bin/bash
# Find which releases contain these commits

echo "=== Finding release versions for pinned commits ==="

# Get all tags for each repo and their commit SHAs
echo ""
echo "docker/login-action - finding version for 28fdb31ff34708d19615a74d67103ddc2ea9725c"
curl -s "https://api.github.com/repos/docker/login-action/git/matching-refs/tags/v" | jq -r '.[] | "\(.ref): \(.object.sha)"' 2>/dev/null | grep -E "v3|v2" | head -20

echo ""
echo "docker/metadata-action - finding version for c299e40c65443455700f0fdfc63efafe5b349051"
curl -s "https://api.github.com/repos/docker/metadata-action/git/matching-refs/tags/v" | jq -r '.[] | "\(.ref): \(.object.sha)"' 2>/dev/null | grep -E "v5|v4" | head -20

echo ""
echo "docker/build-push-action - finding version for 9e436ba9f2d7bcd1d038c8e55d039d37896ddc5d"
curl -s "https://api.github.com/repos/docker/build-push-action/git/matching-refs/tags/v" | jq -r '.[] | "\(.ref): \(.object.sha)"' 2>/dev/null | grep -E "v6|v5" | head -20

#!/bin/bash
# Get detailed commit information for the pinned commits

echo "=== Commit details for pinned hashes ==="

echo ""
echo "docker/login-action@28fdb31ff34708d19615a74d67103ddc2ea9725c"
curl -s "https://api.github.com/repos/docker/login-action/commits/28fdb31ff34708d19615a74d67103ddc2ea9725c" | jq -r '.commit | "\(.author.date): \(.message)"' 2>/dev/null

echo ""
echo "docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051"
curl -s "https://api.github.com/repos/docker/metadata-action/commits/c299e40c65443455700f0fdfc63efafe5b349051" | jq -r '.commit | "\(.author.date): \(.message)"' 2>/dev/null

echo ""
echo "docker/build-push-action@9e436ba9f2d7bcd1d038c8e55d039d37896ddc5d"
curl -s "https://api.github.com/repos/docker/build-push-action/commits/9e436ba9f2d7bcd1d038c8e55d039d37896ddc5d" | jq -r '.commit | "\(.author.date): \(.message)"' 2>/dev/null

# Now check if there are any advisories or security issues
echo ""
echo "=== Checking for security advisories ==="
for action in "login-action" "metadata-action" "build-push-action"; do
  repo="docker/${action}"
  echo ""
  echo "$repo:"
  curl -s "https://api.github.com/repos/${repo}/security/advisories" | jq -r '.[] | "\(.ghsa_id): \(.summary)"' 2>/dev/null | head -3
done

# First, locate the build.gradle file
find . -name "build.gradle" -type f

# Check file size and read the build.gradle file
wc -l ./build.gradle && echo "---" && cat -n ./build.gradle

# Check if springBootVersion property is used elsewhere in gradle files
grep -r "springBootVersion" . --include="*.gradle" 2>/dev/null

# Also check the referenced gradle profile files
echo "--- Checking profile-minimal.gradle ---"
cat ./gradle/profile-minimal.gradle 2>/dev/null || echo "File not found"

echo "--- Checking profile-complete.gradle ---"  
cat ./gradle/profile-complete.gradle 2>/dev/null || echo "File not found"

# Search for any usage of springBootVersion variable in code or documentation
rg "springBootVersion" --type gradle --type java 2>/dev/null | grep -v "set('springBootVersion"

# Also check if there are any imports or references in other build files
find . -name "*.gradle" -o -name "*.properties" | xargs grep -l "springBootVersion" 2>/dev/null

#!/bin/bash
# Find explicit JUnit dependencies and engines
rg -nP -C2 '(junit-?vintage|junit-?jupiter|org\.junit\.jupiter|org\.junit\.vintage|junit[:"]\s*4\.)' \
  -g '!**/build/**' -g '!**/out/**'

# Spot JUnit4 annotations in tests
rg -nP -C2 'org\.junit\.(Test|Before|Rule)|@RunWith\(SpringRunner\.class\)' src/test

#!/bin/bash
# Search for JUnit dependencies in Maven pom.xml
rg -nP '<artifactId>junit' -C1 -g 'pom.xml'
rg -nP 'org\.junit\.vintage|org\.junit\.jupiter' -g 'pom.xml'

# If Gradle build script present, search for junit dependencies
rg -nP 'junit' -g 'build.gradle' -g 'build.gradle.kts'