Makefile

.PHONY: help build install clean test fmt vet lint deps
.PHONY: search-github scan-github fix-github scan-local fix-local
.PHONY: scan-json fix-auto check dev ci build-all

# Configuration
BINARY_NAME := code-remediate
ORG ?= 
LOCAL_REPOS_PATH ?= 
GITHUB_REPOS_DIR ?= 
DEBUG_FLAG := $(if $(DEBUG),--debug,)

# Default target
help:
	@echo "════════════════════════════════════════════════════════════════"
	@echo "AWS Advanced Wrapper Vulnerability Scanner - Makefile"
	@echo "════════════════════════════════════════════════════════════════"
	@echo ""
	@echo "📦 BUILD TARGETS:"
	@echo "  build         - Build the binary"
	@echo "  install       - Install to GOPATH/bin"
	@echo "  build-all     - Build for all platforms (Linux, macOS, Windows)"
	@echo "  clean         - Remove build artifacts"
	@echo ""
	@echo "🧪 TESTING & QUALITY:"
	@echo "  test          - Run all tests"
	@echo "  test-cover    - Run tests with coverage report"
	@echo "  fmt           - Format code"
	@echo "  vet           - Run go vet"
	@echo "  lint          - Run golangci-lint (if installed)"
	@echo "  check         - Quick validation (build + vet + test)"
	@echo "  dev           - Development workflow (fmt + vet + test + build)"
	@echo "  ci            - CI workflow (deps + fmt + vet + test + build)"
	@echo ""
	@echo "🔍 GITHUB SOURCE OPERATIONS:"
	@echo "  search-github - Search GitHub org for packages"
	@echo "  scan-github   - Scan GitHub org for vulnerabilities"
	@echo "  scan-json     - Scan GitHub org and output JSON"
	@echo "  fix-github    - Fix vulnerabilities in GitHub repos (with local dir)"
	@echo "  fix-auto      - Fully automated fix (auto-clone + branch + commit)"
	@echo ""
	@echo "📁 LOCAL SOURCE OPERATIONS:"
	@echo "  scan-local    - Scan local directory for vulnerabilities"
	@echo "  fix-local     - Fix vulnerabilities in local directory"
	@echo ""
	@echo "📝 REQUIRED VARIABLES:"
	@echo "  ORG                - GitHub organization name (for GitHub operations)"
	@echo "  LOCAL_REPOS_PATH   - Path to local repositories (for scan-local, fix-local)"
	@echo ""
	@echo "🎛️  OPTIONAL VARIABLES:"
	@echo "  DEBUG=1            - Enable debug logging"
	@echo "  GITHUB_REPOS_DIR   - Directory with cloned GitHub repos (for fix-github)"
	@echo ""
	@echo "💡 EXAMPLES:"
	@echo "  # Using Makefile targets:"
	@echo "  make search-github ORG=MyOrg"
	@echo "  make scan-github ORG=MyOrg"
	@echo "  make scan-json ORG=MyOrg > results.json"
	@echo "  make fix-github ORG=MyOrg GITHUB_REPOS_DIR=~/projects"
	@echo "  make fix-auto ORG=MyOrg"
	@echo "  make scan-local LOCAL_REPOS_PATH=/path/to/repos"
	@echo "  make fix-local LOCAL_REPOS_PATH=/path/to/repos"
	@echo ""
	@echo "  # Direct binary usage:"
	@echo "  ./code-remediate --source=github --org=MyOrg search"
	@echo "  ./code-remediate --source=github --org=MyOrg scan"
	@echo "  ./code-remediate --source=github --org=MyOrg scan -f json > output.json"
	@echo "  ./code-remediate --source=local --path=/repos scan"
	@echo "  ./code-remediate --source=github --org=MyOrg fix --auto-clone --auto-commit"
	@echo ""
	@echo "════════════════════════════════════════════════════════════════"

# Build the binary
build:
	@echo "🔨 Building $(BINARY_NAME)..."
	@go build -o $(BINARY_NAME) .
	@echo "✅ Build complete: ./$(BINARY_NAME)"

# Install to GOPATH/bin
install:
	@echo "📦 Installing $(BINARY_NAME)..."
	@go install .
	@echo "✅ Installed to GOPATH/bin"

# Clean build artifacts
clean:
	@echo "🧹 Cleaning build artifacts..."
	@rm -f $(BINARY_NAME)
	@rm -f $(BINARY_NAME)-*
	@rm -f *.test
	@rm -f coverage.txt coverage.html
	@rm -rf code-remediate-repos/
	@echo "✅ Clean complete"

# Download dependencies
deps:
	@echo "📦 Downloading dependencies..."
	go mod download
	go mod tidy
	@echo "✅ Dependencies ready"

#═══════════════════════════════════════════════════════════════
# GITHUB SOURCE OPERATIONS
#═══════════════════════════════════════════════════════════════

# Search GitHub organization for AWS wrapper packages
search-github: build
	@if [ -z "$(ORG)" ]; then \
		echo "❌ Error: ORG variable required"; \
		echo "Usage: make search-github ORG=MyOrganization"; \
		exit 1; \
	fi
	@echo "🔍 Searching GitHub organization: $(ORG)"
	@./$(BINARY_NAME) --source=github --org=$(ORG) search $(DEBUG_FLAG)

# Scan GitHub organization for vulnerabilities (human-readable report)
scan-github: build
	@if [ -z "$(ORG)" ]; then \
		echo "❌ Error: ORG variable required"; \
		echo "Usage: make scan-github ORG=MyOrganization"; \
		exit 1; \
	fi
	@echo "🔍 Scanning GitHub organization: $(ORG)"
	@./$(BINARY_NAME) --source=github --org=$(ORG) scan $(DEBUG_FLAG)

# Scan GitHub organization and output JSON
scan-json: build
	@if [ -z "$(ORG)" ]; then \
		echo "❌ Error: ORG variable required"; \
		echo "Usage: make scan-json ORG=MyOrganization > results.json"; \
		exit 1; \
	fi
	@./$(BINARY_NAME) --source=github --org=$(ORG) scan --output=json

# Fix vulnerabilities with local repositories
fix-github: build
	@if [ -z "$(ORG)" ]; then \
		echo "❌ Error: ORG variable required"; \
		echo "Usage: make fix-github ORG=MyOrg GITHUB_REPOS_DIR=~/projects"; \
		exit 1; \
	fi
	@if [ -z "$(GITHUB_REPOS_DIR)" ]; then \
		echo "❌ Error: GITHUB_REPOS_DIR variable required"; \
		echo "Usage: make fix-github ORG=MyOrg GITHUB_REPOS_DIR=~/projects"; \
		exit 1; \
	fi
	@echo "🔧 Fixing vulnerabilities in GitHub repos"
	@echo "📁 Using local repos: $(GITHUB_REPOS_DIR)"
	@./$(BINARY_NAME) --source=github --org=$(ORG) fix \
		--local-repos-dir=$(GITHUB_REPOS_DIR) \
		--auto-branch \
		--auto-commit \
		$(DEBUG_FLAG)
	@echo ""
	@echo "✅ Fix complete! Next steps:"
	@echo "   1. Review the changes in each repository"
	@echo "   2. Push branches: cd $(GITHUB_REPOS_DIR)/<repo> && git push"
	@echo "   3. Create pull requests using 'gh pr create'"

# Fully automated fix (auto-clone + branch + commit)
fix-auto: build
	@if [ -z "$(ORG)" ]; then \
		echo "❌ Error: ORG variable required"; \
		echo "Usage: make fix-auto ORG=MyOrganization"; \
		exit 1; \
	fi
	@echo "🔧 Running fully automated fix for: $(ORG)"
	@echo "⚠️  This will clone repositories automatically!"
	@./$(BINARY_NAME) --source=github --org=$(ORG) fix \
		--auto-clone \
		--auto-branch \
		--auto-commit \
		$(DEBUG_FLAG)
	@echo ""
	@echo "✅ Automated fix complete!"
	@echo "   Repositories cloned to: code-remediate-repos/"
	@echo "   Review changes, push branches, and create PRs"

#═══════════════════════════════════════════════════════════════
# LOCAL SOURCE OPERATIONS
#═══════════════════════════════════════════════════════════════

# Scan local directory for vulnerabilities
scan-local: build
	@if [ -z "$(LOCAL_REPOS_PATH)" ]; then \
		echo "❌ Error: LOCAL_REPOS_PATH variable required"; \
		echo "Usage: make scan-local LOCAL_REPOS_PATH=/path/to/repos"; \
		exit 1; \
	fi
	@echo "🔍 Scanning local directory: $(LOCAL_REPOS_PATH)"
	@./$(BINARY_NAME) --source=local --path=$(LOCAL_REPOS_PATH) scan $(DEBUG_FLAG)

# Fix vulnerabilities in local directory
fix-local: build
	@if [ -z "$(LOCAL_REPOS_PATH)" ]; then \
		echo "❌ Error: LOCAL_REPOS_PATH variable required"; \
		echo "Usage: make fix-local LOCAL_REPOS_PATH=/path/to/repos"; \
		exit 1; \
	fi
	@echo "🔧 Fixing vulnerabilities in: $(LOCAL_REPOS_PATH)"
	@./$(BINARY_NAME) --source=local --path=$(LOCAL_REPOS_PATH) fix \
		--auto-branch \
		--auto-commit \
		$(DEBUG_FLAG)
	@echo ""
	@echo "✅ Fix complete!"
	@echo "   1. Review changes in $(LOCAL_REPOS_PATH)"
	@echo "   2. Push branches and create pull requests"

#═══════════════════════════════════════════════════════════════
# BUILD TARGETS
#═══════════════════════════════════════════════════════════════

# Build for multiple platforms
build-all:
	@echo "🔨 Building for multiple platforms..."
	@GOOS=linux GOARCH=amd64 go build -o $(BINARY_NAME)-linux-amd64 .
	@GOOS=darwin GOARCH=amd64 go build -o $(BINARY_NAME)-darwin-amd64 .
	@GOOS=darwin GOARCH=arm64 go build -o $(BINARY_NAME)-darwin-arm64 .
	@GOOS=windows GOARCH=amd64 go build -o $(BINARY_NAME)-windows-amd64.exe .
	@echo "✅ Built for all platforms:"
	@ls -lh $(BINARY_NAME)-*

#═══════════════════════════════════════════════════════════════
# TESTING & QUALITY
#═══════════════════════════════════════════════════════════════

# Run tests
test:
	@echo "🧪 Running tests..."
	@go test -v ./...

# Run tests with coverage
test-cover:
	@echo "🧪 Running tests with coverage..."
	@go test -coverprofile=coverage.txt -covermode=atomic ./...
	@go tool cover -html=coverage.txt -o coverage.html
	@echo "✅ Coverage report: coverage.html"
	@go tool cover -func=coverage.txt | grep total

# Format code
fmt:
	@echo "✨ Formatting code..."
	@go fmt ./...
	@echo "✅ Code formatted"

# Run go vet
vet:
	@echo "🔍 Running go vet..."
	@go vet ./...
	@echo "✅ Vet complete"

# Run linter (requires golangci-lint)
lint:
	@echo "🔍 Running golangci-lint..."
	@if command -v golangci-lint > /dev/null; then \
		golangci-lint run; \
		echo "✅ Lint complete"; \
	else \
		echo "⚠️  golangci-lint not installed"; \
		echo "   Install: https://golangci-lint.run/"; \
	fi

#═══════════════════════════════════════════════════════════════
# WORKFLOW TARGETS
#═══════════════════════════════════════════════════════════════

# Quick check (build, vet, test)
check: build vet test
	@echo "✅ All checks passed"

# Development workflow
dev: fmt vet test build
	@echo "✅ Development build complete"

# CI workflow
ci: deps fmt vet test-cover build
	@echo "✅ CI build complete"