#!/bin/sh

set -xe

TIMESTAMP=$(date "+%F %T %Z")

image="$@"
printf "Set image to $image...\n"

extra_vars=""

if [ ! -z $REGISTRY_USERNAME ]; then
    printf "Found registry username...\n"
    extra_vars="$extra_vars --username $REGISTRY_USERNAME"
fi

if [ ! -z $REGISTRY_PASSWORD ]; then
    printf "Found registry password\n"
    extra_vars="$extra_vars --password $REGISTRY_PASSWORD"
fi

extra_vars="$extra_vars -a \"org.opencontainers.trivy.created=$TIMESTAMP\" -a \"org.opencontainers.trivy.status=Passed\" -a \"org.opencontainers.trivy.tag=${DRONE_COMMIT_SHA:0:8}\""

printf "Checking for result file...\n"
if [ -e result.json ]; then
    printf "Result file found, attaching it to container...\n"
    oras attach $extra_vars --artifact-type=application/json $image "result.json"
else
    printf "Result file not found !\n"
    exit 1
fi