bin_dir := bin

osv-scanner := $(bin_dir)/osv-scanner

kernel_name := $(shell uname -s | tr '[:upper:]' '[:lower:]')

machine_hardware := $(shell uname -m)

ifeq ($(machine_hardware), x86_64)

machine_hardware := amd64

ifeq ($(machine_hardware), aarch64)

machine_hardware := arm64

.PHONY: scan

scan: $(osv-scanner)

rm -f fabric-chaincode-shim/gradle.lockfile

./gradlew --quiet :fabric-chaincode-shim:dependencies --write-locks --configuration runtimeClasspath

bin/osv-scanner scan --lockfile=fabric-chaincode-shim/gradle.lockfile

.PHONY: scan-all

scan-all: $(osv-scanner)

rm -f fabric-chaincode-shim/gradle.lockfile

./gradlew --quiet :fabric-chaincode-shim:dependencies --write-locks

bin/osv-scanner scan --lockfile=fabric-chaincode-shim/gradle.lockfile

.PHONY: install-osv-scanner

install-osv-scanner:

mkdir -p '$(bin_dir)'

curl --fail --location --show-error --silent --output '$(osv-scanner)' \

'https://github.com/google/osv-scanner/releases/latest/download/osv-scanner_$(kernel_name)_$(machine_hardware)'

chmod u+x '$(osv-scanner)'

$(osv-scanner):

$(MAKE) install-osv-scanner