Function Run

runtime/pkg/gitutil/gitcmdwrapper.go:216–233

Run executes a git command with the specified arguments in the given path and returns its output or an error. If path is empty, the command runs without -C (use for commands like `clone` that take an explicit destination). Use it to run one-off git commands that don't fit into the other helper funct

(ctx context.Context, path string, args ...string)

// If path is empty, the command runs without -C (use for commands like `clone` that take an explicit destination).
// Use it to run one-off git commands that don't fit into the other helper functions in this package.
func Run(ctx context.Context, path string, args ...string) (string, error) {
	fullArgs := args
	if path != "" {
		fullArgs = append([]string{"-C", path}, args...)
	}
	var stdout, stderr bytes.Buffer
	cmd := exec.CommandContext(ctx, "git", fullArgs...)
	// Force English error messages so stderr substring checks are stable, and disable interactive credential prompts.
	cmd.Env = append(os.Environ(), "LC_ALL=C", "GIT_TERMINAL_PROMPT=0")
	cmd.Stdout = &stdout
	cmd.Stderr = &stderr
	if err := cmd.Run(); err != nil {
		// Redact credentials: args and git's stderr may contain credential-embedded remote URLs.
		msg := fmt.Sprintf("git %s: %s", strings.Join(args, " "), strings.TrimSpace(stderr.String()))
		return "", fmt.Errorf("%s(%w)", redactURLCredentials(msg), err)
	}
	return strings.TrimSpace(stdout.String()), nil
}

// urlCredentialsRegexp matches the userinfo component of a URL (e.g. "https://user:token@host").
var urlCredentialsRegexp = regexp.MustCompile(`([a-zA-Z][a-zA-Z0-9+.-]*://)[^@/\s]+@`)