ENV ?= venv
ENV_BIN ?= $(ENV)/bin

$(ENV):
	python3 -m venv $(ENV)
	pip install --upgrade pip
	pip install pre-commit detect-secrets requests

# Installs pre-commit hooks
.PHONY: install-hooks
install-hooks: $(ENV)
	$(ENV_BIN)/pre-commit install --install-hooks

# Checks files for encryption
.PHONY: check
check: $(ENV) deps
	$(ENV_BIN)/pre-commit run --all-files

# Clears all roles and virtualenv
.PHONY: clean
clean:
	rm -fr $(ENV)

# Creates a new secrets baseline
.secrets-baseline: $(ENV)
	$(ENV_BIN)/detect-secrets scan > .secrets-baseline

# Audits secrets against baseline
.PHONY: secrets-audit
secrets-audit: $(ENV) .secrets-baseline
	$(ENV_BIN)/detect-secrets audit .secrets-baseline

# Updates secrets baseline
.PHONY: secrets-update
secrets-update: $(ENV) .secrets-baseline
	$(ENV_BIN)/detect-secrets scan --baseline .secrets-baseline