Taskfile.yaml

# https://taskfile.dev

version: '3'

vars:
  BINARY_NAME: bin/dockbridge

tasks:
  default:
    desc: Show available tasks
    cmds:
      - task --list

  build:
    desc: Build the binary
    sources:
      - ./**/*.go
      - go.mod
      - go.sum
    generates:
      - "{{.BINARY_NAME}}"
    cmds:
      - go build -o {{.BINARY_NAME}} ./cmd/dockbridge

  test:
    desc: Run tests
    sources:
      - ./**/*.go
    cmds:
      - go test ./...

  package:mac:
    desc: Package the app for macOS
    cmds:
      - echo "Packaging for macOS..."
      - mkdir -p bin
      - fyne package -os darwin -icon {{.TASKFILE_DIR}}/gui/assets/icon.png -name DockBridge -src ./cmd/dockbridge-gui
      - mv DockBridge.app bin/
      - echo "Packaging complete (Mac)"

  package:windows:
    desc: Package the app for Windows
    cmds:
      - echo "Packaging for Windows..."
      - mkdir -p bin
      - fyne package -os windows -icon {{.TASKFILE_DIR}}/gui/assets/icon.png -name DockBridge.exe -src ./cmd/dockbridge-gui
      - mv DockBridge.exe bin/
      - echo "Packaging complete (Windows)"

  package:linux:
    desc: Package the app for Linux
    cmds:
      - echo "Packaging for Linux..."
      - mkdir -p bin
      - fyne package -os linux -icon {{.TASKFILE_DIR}}/gui/assets/icon.png -name DockBridge -src ./cmd/dockbridge-gui
      - mv DockBridge.tar.xz bin/ || mv DockBridge bin/
      - echo "Packaging complete (Linux)"

  lint:
    desc: Run golangci-lint (only if Go files changed)
    deps: [golangci-lint:install]
    sources:
      - ./**/*.go
    cmds:
      - golangci-lint run ./...

  golangci-lint:install:
    desc: Install golangci-lint if not present
    status:
      - which golangci-lint
    cmds:
      - echo "Installing golangci-lint..."
      - curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/HEAD/install.sh | sh -s -- -b $(go env GOPATH)/bin
      - echo "✅ golangci-lint installed"

  modernize:
    desc: Run modernize linter to check for code modernizations
    deps: [golangci-lint:install]
    cmds:
      - golangci-lint run --enable-only modernize ./...

  modernize:fix:
    desc: Run modernize linter and automatically fix issues
    deps: [golangci-lint:install]
    cmds:
      - golangci-lint run --fix --enable-only modernize ./...

  fmt:
    desc: Format code
    cmds:
      - go fmt ./...

  security:install:gosec:
    desc: Install gosec if not present
    status:
      - which gosec
    cmds:
      - curl -sfL https://raw.githubusercontent.com/securego/gosec/master/install.sh | sh -s -- -b $(go env GOPATH)/bin

  security:install:govulncheck:
    desc: Install govulncheck if not present
    status:
      - which govulncheck
    cmds:
      - go install golang.org/x/vuln/cmd/govulncheck@latest

  security:gosec:
    desc: Run gosec security scanner
    deps: [security:install:gosec]
    sources:
      - ./**/*.go
    cmds:
      - gosec -exclude=G104 -exclude-dir=ssh-docker-proxy ./...
      - cd ssh-docker-proxy && gosec -exclude=G104 ./...

  security:govulncheck:
    desc: Run govulncheck security scanner
    deps: [security:install:govulncheck]
    sources:
      - go.mod
      - go.sum
    cmds:
      - govulncheck ./...

  security:install:trivy:
    desc: Install trivy if not present
    status:
      - which trivy
    cmds:
      - |
        echo "Installing trivy..."
        if [ "$(uname)" = "Darwin" ]; then
          brew install aquasecurity/trivy/trivy
        else
          curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b $(go env GOPATH)/bin
        fi
        echo "✅ trivy installed"

  security:trivy:
    desc: Run trivy filesystem scan
    deps: [security:install:trivy]
    cmds:
      - trivy fs --severity CRITICAL,HIGH .

  security:
    desc: Run security checks (gosec, govulncheck, trivy)
    deps: [security:gosec, security:govulncheck, security:trivy]

  check:
    desc: Run all checks (fmt, lint, security, test) - for pre-commit
    cmds:
      - task: fmt
      - task: lint
      - task: security
      - task: test

  # Git hooks
  hooks:install:
    desc: Install git pre-commit hook
    cmds:
      - |
        cat > .git/hooks/pre-commit << 'EOF'
        #!/bin/sh
        # Run checks only on changed Go files
        task check
        EOF
        chmod +x .git/hooks/pre-commit
        echo "✅ Pre-commit hook installed (runs: task check)"

  hooks:uninstall:
    desc: Remove git pre-commit hook
    cmds:
      - rm -f .git/hooks/pre-commit
      - echo "✅ Pre-commit hook removed"

  # Release tasks
  release:patch:
    desc: Create a patch release (v1.0.0 -> v1.0.1)
    cmds:
      - task: release
        vars: { BUMP: patch }

  release:minor:
    desc: Create a minor release (v1.0.0 -> v1.1.0)
    cmds:
      - task: release
        vars: { BUMP: minor }

  release:major:
    desc: Create a major release (v1.0.0 -> v2.0.0)
    cmds:
      - task: release
        vars: { BUMP: major }

  release:
    desc: Create and push a release tag
    internal: true
    vars:
      CURRENT_TAG:
        sh: git describe --tags --abbrev=0 2>/dev/null || echo "v0.0.0"
      MAJOR:
        sh: echo {{.CURRENT_TAG}} | sed 's/v//' | cut -d. -f1
      MINOR:
        sh: echo {{.CURRENT_TAG}} | sed 's/v//' | cut -d. -f2
      PATCH:
        sh: echo {{.CURRENT_TAG}} | sed 's/v//' | cut -d. -f3
      NEW_TAG:
        sh: |
          case "{{.BUMP}}" in
            major) echo "v$(({{.MAJOR}}+1)).0.0" ;;
            minor) echo "v{{.MAJOR}}.$(({{.MINOR}}+1)).0" ;;
            patch) echo "v{{.MAJOR}}.{{.MINOR}}.$(({{.PATCH}}+1))" ;;
          esac
    cmds:
      - echo "Current version{{":"}} {{.CURRENT_TAG}}"
      - echo "New version{{":"}} {{.NEW_TAG}}"
      - git tag {{.NEW_TAG}}
      - git push origin {{.NEW_TAG}}
      - echo "✅ Released {{.NEW_TAG}}"
      - echo "GitHub Actions will now build and publish the release"