Project: Add git commit to version output (#103)

If a build is done with the `--stamp` and
`--workspace_status_command=Testing/workspace_status.sh` flags, the
current git commit will be added to the Info.plist of every binary. If
those flags aren't set, the commit will be `unset`. These values are
added into a separate key in the Info.plist called `SNTCommitHash`.

```
» santactl version
santad          | 9999.1 (build 1, commit 5a39e87)
santactl        | 9999.1 (build 1, commit 5a39e87)
SantaGUI        | 9999.1 (build 1, commit 5a39e87)
```

Source/common/BUILD

@@ -548,3 +548,15 @@ objc_library(
         "@com_google_googletest//:gtest",
     ],
 )
+
+genrule(
+    name = "CommitHash",
+    outs = ["CommitHash.plist"],
+    cmd = """
+    STABLE_GIT_COMMIT=$$(awk '/STABLE_GIT_COMMIT/ { print $$2 }' bazel-out/stable-status.txt)
+    defaults write $${PWD}/$(@) SNTCommitHash -string $${STABLE_GIT_COMMIT:-unset}
+    """,
+    local = 1,
+    message = "Generating CommitHash.plist",
+    stamp = 1,
+)

Source/gui/BUILD

@@ -138,7 +138,10 @@ macos_application(
         # Non-adhoc builds get thier entitlements from the provisioning profile.
         "//conditions:default": None,
     }),
-    infoplists = ["Info.plist"],
+    infoplists = [
+        "Info.plist",
+        "//Source/common:CommitHash",
+    ],
     minimum_os_version = "12.0",
     provisioning_profile = select({
         "//:adhoc_build": None,

Source/santabundleservice/BUILD

@@ -34,7 +34,10 @@ macos_command_line_application(
         "--force",
         "--options library,kill,runtime",
     ],
-    infoplists = ["Info.plist"],
+    infoplists = [
+        "Info.plist",
+        "//Source/common:CommitHash",
+    ],
     minimum_os_version = "12.0",
     provisioning_profile = select({
         "//:adhoc_build": None,

Source/santactl/BUILD

@@ -105,7 +105,10 @@ macos_command_line_application(
         "--force",
         "--options library,kill,runtime",
     ],
-    infoplists = ["Info.plist"],
+    infoplists = [
+        "Info.plist",
+        "//Source/common:CommitHash",
+    ],
     minimum_os_version = "12.0",
     provisioning_profile = select({
         "//:adhoc_build": None,

Source/santactl/Commands/SNTCommandVersion.m

@@ -70,7 +70,14 @@ - (NSString *)composeVersionsFromDict:(NSDictionary *)dict {
   if (!dict[@"CFBundleVersion"]) return @"";
   NSString *productVersion = dict[@"CFBundleShortVersionString"];
   NSString *buildVersion = [[dict[@"CFBundleVersion"] componentsSeparatedByString:@"."] lastObject];
-  return [NSString stringWithFormat:@"%@ (build %@)", productVersion, buildVersion];
+
+  NSString *commitHash = dict[@"SNTCommitHash"];
+  if (commitHash.length > 8) {
+    commitHash = [commitHash substringToIndex:8];
+  }
+
+  return [NSString
+    stringWithFormat:@"%@ (build %@, commit %@)", productVersion, buildVersion, commitHash];
 }
 
 - (NSString *)santadVersion {

Source/santad/BUILD

@@ -860,7 +860,10 @@ macos_bundle(
         # Non-adhoc builds get their entitlements from the provisioning profile.
         "//conditions:default": None,
     }),
-    infoplists = ["Info.plist"],
+    infoplists = [
+        "Info.plist",
+        "//Source/common:CommitHash",
+    ],
     linkopts = ["-execute"],
     minimum_os_version = "12.0",
     provisioning_profile = select({

Source/santametricservice/BUILD

@@ -64,7 +64,10 @@ macos_command_line_application(
         "--force",
         "--options library,kill,runtime",
     ],
-    infoplists = ["Info.plist"],
+    infoplists = [
+        "Info.plist",
+        "//Source/common:CommitHash",
+    ],
     minimum_os_version = "12.0",
     provisioning_profile = select({
         "//:adhoc_build": None,

Testing/workspace_status.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+
+echo "STABLE_GIT_COMMIT $(git rev-parse HEAD)"