Support Scan Breakglass

tools/test-proxy/Azure.Sdk.Tools.TestProxy/CommandOptions/OptionsGenerator.cs

@@ -55,6 +55,11 @@ public static RootCommand GenerateCommandLineOptions(Func<DefaultOptions, Task>
                 getDefaultValue: () => false);
             universalOption.AddAlias("-u");
 
+            var breakGlassOption = new Option<bool>(
+                name: "--breakGlass",
+                description: "Flag; Ignore secret push protection results when pushing.",
+                getDefaultValue: () => false);
+            breakGlassOption.AddAlias("-b");
 
             var collectedArgs = new Argument<string[]>("args")
             {
@@ -92,9 +97,10 @@ public static RootCommand GenerateCommandLineOptions(Func<DefaultOptions, Task>
             root.Add(startCommand);
 
             var pushCommand = new Command("push", "Push the assets, referenced by assets.json, into git.");
+            pushCommand.AddOption(breakGlassOption);
             pushCommand.AddOption(assetsJsonPathOption);
             pushCommand.SetHandler(async (pushOpts) => await callback(pushOpts),
-                new PushOptionsBinder(storageLocationOption, storagePluginOption, assetsJsonPathOption)
+                new PushOptionsBinder(storageLocationOption, storagePluginOption, assetsJsonPathOption, breakGlassOption)
             );
             root.Add(pushCommand);
 

tools/test-proxy/Azure.Sdk.Tools.TestProxy/CommandOptions/PushOptions.cs

@@ -8,27 +8,31 @@ namespace Azure.Sdk.Tools.TestProxy.CommandOptions
     /// </summary>
     public class PushOptions : CLICommandOptions
     {
+        public bool BreakGlass { get; set; }
     }
 
     public class PushOptionsBinder : BinderBase<PushOptions>
     {
         private readonly Option<string> _storageLocationOption;
         private readonly Option<string> _storagePluginOption;
         private readonly Option<string> _assetsJsonPathOption;
+        private readonly Option<bool> _breakGlassOption;
 
-        public PushOptionsBinder(Option<string> storageLocationOption, Option<string> storagePluginOption, Option<string> assetsJsonPathOption)
+        public PushOptionsBinder(Option<string> storageLocationOption, Option<string> storagePluginOption, Option<string> assetsJsonPathOption, Option<bool> breakGlassOption)
         {
             _storageLocationOption = storageLocationOption;
             _storagePluginOption = storagePluginOption;
             _assetsJsonPathOption = assetsJsonPathOption;
+            _breakGlassOption = breakGlassOption;
         }
 
         protected override PushOptions GetBoundValue(BindingContext bindingContext) =>
             new PushOptions
             {
                 StorageLocation = bindingContext.ParseResult.GetValueForOption(_storageLocationOption),
                 StoragePlugin = bindingContext.ParseResult.GetValueForOption(_storagePluginOption),
-                AssetsJsonPath = bindingContext.ParseResult.GetValueForOption(_assetsJsonPathOption)
+                AssetsJsonPath = bindingContext.ParseResult.GetValueForOption(_assetsJsonPathOption),
+                BreakGlass = bindingContext.ParseResult.GetValueForOption(_breakGlassOption),
             };
     }
 }

tools/test-proxy/Azure.Sdk.Tools.TestProxy/Store/GitStore.cs

@@ -121,8 +121,9 @@ public bool CheckForSecrets(GitAssetsConfiguration assetsConfiguration, string[]
         /// Pushes a set of changed files to the assets repo. Honors configuration of assets.json passed into it.
         /// </summary>
         /// <param name="pathToAssetsJson"></param>
+        /// <param name="ignoreSecretProtection"></param>
         /// <returns></returns>
-        public async Task Push(string pathToAssetsJson) {
+        public async Task Push(string pathToAssetsJson, bool ignoreSecretProtection = false) {
             var config = await ParseConfigurationFile(pathToAssetsJson);
 
             var initialized = IsAssetsRepoInitialized(config);
@@ -145,8 +146,11 @@ public async Task Push(string pathToAssetsJson) {
             {
                 if (CheckForSecrets(config, pendingChanges))
                 {
-                    Environment.ExitCode = -1;
-                    return;
+                    if (!ignoreSecretProtection)
+                    {
+                        Environment.ExitCode = -1;
+                        return;
+                    }
                 }
 
                 try

tools/test-proxy/Azure.Sdk.Tools.TestProxy/Store/IAssetsStore.cs

@@ -11,7 +11,8 @@ public interface IAssetsStore
         /// Given a configuration, push the changes made by the test-proxy into the remote store.
         /// </summary>
         /// <param name="pathToAssetsJson"></param>
-        public abstract Task Push(string pathToAssetsJson);
+        /// <param name="ignoreSecretProtection"></param>
+        public abstract Task Push(string pathToAssetsJson, bool ignoreSecretProtection = false);
 
         /// <summary>
         /// Given a configuration, pull any remote resources down into the provided contextPath.

tools/test-proxy/Azure.Sdk.Tools.TestProxy/Store/NullStore.cs

@@ -9,7 +9,7 @@ namespace Azure.Sdk.Tools.TestProxy.Store
 {
     public class NullStore : IAssetsStore
     {
-        public Task Push(string pathToAssetsJson) { return null; }
+        public Task Push(string pathToAssetsJson, bool ignoreSecretProtection = false) { return null; }
 
         public Task<string> Restore(string pathToAssetsJson) { return null; }