chore: make engine pluggable

.envrc.example

@@ -5,7 +5,7 @@ export GOOGLE_APP=''
 export REDIS_INIT="true"
 export GOOGLE_MAX_ATTEMPT="5"
 export BEARER_EXECUTABLE_PATH="./bearer"
-export GITHUB_WORKSPACE="/path/to/bearer/project"
+export GITHUB_WORKSPACE="$PWD"
 export SCAN_DIR=/Users/username/OWASP
 export BEARER_DISABLE_VERSION_CHECK=true
 export BEARER_DISABLE_DEFAULT_RULES=true

cmd/bearer/bearer.go

@@ -1,16 +1,10 @@
 package main
 
 import (
-	"os"
-
 	"github.com/bearer/bearer/cmd/bearer/build"
-	"github.com/bearer/bearer/internal/commands"
+	"github.com/bearer/bearer/external/run"
 )
 
 func main() {
-	app := commands.NewApp(build.Version, build.CommitSHA)
-	if err := app.Execute(); err != nil {
-		// error messages are printed by the framework
-		os.Exit(1)
-	}
+	run.Run(build.Version, build.CommitSHA, run.NewEngine(run.DefaultLanguages()))
 }

e2e/flags/report_flags_test.go

@@ -6,7 +6,7 @@ import (
 	"testing"
 
 	"github.com/bearer/bearer/e2e/internal/testhelper"
-	"github.com/bearer/bearer/internal/util/tmpfile"
+	"github.com/bearer/bearer/pkg/util/tmpfile"
 	"github.com/bradleyjkemp/cupaloy"
 )
 

external/run/run.go

@@ -0,0 +1,97 @@
+package run
+
+import (
+	"os"
+	"regexp"
+
+	"github.com/bearer/bearer/pkg/classification/schema"
+	"github.com/bearer/bearer/pkg/commands"
+	"github.com/bearer/bearer/pkg/engine"
+	"github.com/bearer/bearer/pkg/engine/implementation"
+	"github.com/bearer/bearer/pkg/languages"
+	"github.com/bearer/bearer/pkg/scanner/ast/query"
+	"github.com/bearer/bearer/pkg/scanner/ast/tree"
+	"github.com/bearer/bearer/pkg/scanner/detectors/common"
+	"github.com/bearer/bearer/pkg/scanner/detectors/types"
+	"github.com/bearer/bearer/pkg/scanner/language"
+	"github.com/bearer/bearer/pkg/scanner/ruleset"
+	"github.com/bearer/bearer/pkg/util/regex"
+	"github.com/bearer/bearer/pkg/util/stringutil"
+)
+
+type Object = common.Object
+type Property = common.Property
+type String = common.String
+
+type Engine = engine.Engine
+
+type Analyzer = language.Analyzer
+type Language = language.Language
+type Pattern = language.Pattern
+type PatternBase = language.PatternBase
+type PatternVariable = language.PatternVariable
+type Scope = language.Scope
+
+type Query = query.Query
+type Set = query.Set
+
+type Rule = ruleset.Rule
+
+type Classifier = schema.Classifier
+
+type Builder = tree.Builder
+type Node = tree.Node
+
+type Context = types.Context
+type Detection = types.Detection
+type Detector = types.Detector
+type DetectorBase = types.DetectorBase
+
+var BuiltinObjectRule = ruleset.BuiltinObjectRule
+var BuiltinStringRule = ruleset.BuiltinStringRule
+
+func GetNonVirtualObjects(detectorContext types.Context, node *tree.Node) ([]*types.Detection, error) {
+	return common.GetNonVirtualObjects(detectorContext, node)
+}
+
+func StripQuotes(input string) string {
+	return stringutil.StripQuotes(input)
+}
+
+func ConcatenateChildStrings(node *tree.Node, detectorContext types.Context) ([]interface{}, error) {
+	return common.ConcatenateChildStrings(node, detectorContext)
+}
+
+func ConcatenateAssignEquals(node *tree.Node, detectorContext types.Context) ([]interface{}, error) {
+	return common.ConcatenateAssignEquals(node, detectorContext)
+}
+
+func ProjectObject(node *tree.Node, detectorContext types.Context, objectNode *tree.Node, objectName string, propertyName string, isPropertyAccess bool) ([]interface{}, error) {
+	return common.ProjectObject(node, detectorContext, objectNode, objectName, propertyName, isPropertyAccess)
+}
+
+func ReplaceAllWithSubmatches(pattern *regexp.Regexp, input string, replace func(submatches []string) (string, error)) (string, error) {
+	return regex.ReplaceAllWithSubmatches(pattern, input, replace)
+}
+
+func NewScope(parent *language.Scope) *language.Scope {
+	return language.NewScope(parent)
+}
+
+func NewEngine(languages []Language) Engine {
+	return implementation.New(languages)
+}
+
+func DefaultLanguages() []Language {
+	return languages.Default()
+}
+
+func Run(version, commitSHA string, engine Engine) {
+	err := commands.NewApp(version, commitSHA, engine).Execute()
+	engine.Close()
+
+	if err != nil {
+		// error messages are printed by the framework
+		os.Exit(1)
+	}
+}