Function _install_from_github_artifact

ggshield/cmd/plugin/install.py:383–421

Install a plugin from a GitHub Actions artifact.

(
    ctx: click.Context,
    url: str,
    signature_mode: SignatureVerificationMode = SignatureVerificationMode.STRICT,
)

def _install_from_github_artifact(
    ctx: click.Context,
    url: str,
    signature_mode: SignatureVerificationMode = SignatureVerificationMode.STRICT,
) -> None:
    """Install a plugin from a GitHub Actions artifact."""
    ui.display_warning("GitHub artifacts are ephemeral and cannot be auto-updated.")

    downloader = PluginDownloader()
    enterprise_config = EnterpriseConfig.load()

    ui.display_info("Installing from GitHub artifact...")

    try:
        plugin_name, version, installed_wheel = (
            downloader.download_from_github_artifact(url, signature_mode=signature_mode)
        )

        plugin_name = enable_installed_plugin(
            enterprise_config, plugin_name, version, installed_wheel
        )
        enterprise_config.save()

        ui.display_info(f"Installed {plugin_name} v{version}")

    except SignatureVerificationError as e:
        ui.display_error(f"Signature verification failed: {e}")
        ui.display_info(
            "This plugin is not signed by GitGuardian. "
            "If you trust its origin and still want to install it, "
            "pass --allow-unsigned."
        )
        ctx.exit(ExitCode.UNEXPECTED_ERROR)
    except GitHubArtifactError as e:
        ui.display_error(str(e))
        ctx.exit(ExitCode.UNEXPECTED_ERROR)
    except Exception as e:
        ui.display_error(f"Failed to install from GitHub artifact: {e}")
        ctx.exit(ExitCode.UNEXPECTED_ERROR)