From f668a7254c66efa48f762bb8ee2a379d29381837 Mon Sep 17 00:00:00 2001
From: mdtro <20070360+mdtro@users.noreply.github.com>
Date: Wed, 29 Jan 2025 16:55:50 -0600
Subject: [PATCH 1/2] feat(lib): add support for trufflehog

---
 devenv/lib/trufflehog.py | 55 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 55 insertions(+)
 create mode 100644 devenv/lib/trufflehog.py

diff --git a/devenv/lib/trufflehog.py b/devenv/lib/trufflehog.py
new file mode 100644
index 0000000..e670df3
--- /dev/null
+++ b/devenv/lib/trufflehog.py
@@ -0,0 +1,55 @@
+from __future__ import annotations
+
+import os
+import shutil
+import tempfile
+
+from devenv.lib import archive
+from devenv.lib import fs
+from devenv.lib import proc
+
+
+def _install(url: str, sha256: str, into: str) -> None:
+    os.makedirs(into, exist_ok=True)
+    with tempfile.TemporaryDirectory(dir=into) as tmpd:
+        archive_file = archive.download(url, sha256, dest=f"{tmpd}/download")
+        archive.unpack(archive_file, tmpd)
+
+        # the archive was atomically placed into tmpd so
+        # these are on the same fs and can be atomically moved too
+        os.replace(f"{tmpd}/trufflehog", f"{into}/trufflehog")
+
+
+def uninstall(binroot: str) -> None:
+    for fp in (f"{binroot}/trufflehog",):
+        try:
+            os.remove(fp)
+        except FileNotFoundError:
+            # it's better to do this than to guard with
+            # os.path.exists(fp) because if it's an invalid or circular
+            # symlink the result'll be False!
+            pass
+
+
+def _version(binpath: str) -> str:
+    stdout = proc.run((binpath, "--version"), stdout=True)
+    return stdout.split()[-1]
+
+
+def install(version: str, url: str, sha256: str, reporoot: str) -> None:
+    binroot = fs.ensure_binroot(reporoot)
+    binpath = f"{binroot}/trufflehog"
+
+    if shutil.which("trufflehog", path=binroot) == binpath:
+        installed_version = _version(binpath)
+        if version == installed_version:
+            return
+        print(f"installed trufflehog {installed_version} is outdated!")
+
+    print(f"installing trufflehog {version}...")
+    uninstall(binroot)
+    _install(url, sha256, binroot)
+
+    installed_version = _version(binpath)
+    if version != installed_version:
+        raise SystemExit(f"Failed to install trufflehog {version}!")
\ No newline at end of file

From 04a030e8b1581f02ca101e2f0aefb1425d059441 Mon Sep 17 00:00:00 2001
From: mdtro <20070360+mdtro@users.noreply.github.com>
Date: Wed, 29 Jan 2025 16:59:48 -0600
Subject: [PATCH 2/2] linting fixes

---
 devenv/lib/trufflehog.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/devenv/lib/trufflehog.py b/devenv/lib/trufflehog.py
index e670df3..c617c03 100644
--- a/devenv/lib/trufflehog.py
+++ b/devenv/lib/trufflehog.py
@@ -52,4 +52,4 @@ def install(version: str, url: str, sha256: str, reporoot: str) -> None:
 
     installed_version = _version(binpath)
     if version != installed_version:
-        raise SystemExit(f"Failed to install trufflehog {version}!")
\ No newline at end of file
+        raise SystemExit(f"Failed to install trufflehog {version}!")