Add check-file-permissions script

.github/workflows/static-code-analysis.yml

@@ -52,6 +52,9 @@ jobs:
       - name: Install dependencies
         run: composer update --ansi
 
+      - name: Check - file permissions
+        run: bin/check-file-permissions
+
       - name: Check - PHP-CS-Fixer
         run: composer cs:check
 

bin/check-file-permissions

@@ -0,0 +1,39 @@
+#!/usr/bin/env sh
+set -eu
+
+FILES_WITH_WRONG_PERMISSIONS=$(
+    git ls-files --stage . ':!bin/*' \
+    | grep --extended-regexp "^100755 " \
+    | sort -fh
+)
+BIN_FILES_WITH_WRONG_PERMISSIONS=$(
+    git ls-files --stage bin \
+    | grep --invert-match --extended-regexp "^100755 " \
+    | sort -fh
+)
+
+if [ -n "$FILES_WITH_WRONG_PERMISSIONS" ]; then
+    printf '\033[31mFAIL\033[0m Non-executable files with +x permissions were detected!\n'
+    [ -z "${GITHUB_ACTIONS+x}" ] || echo '::group::Non-executable files'
+    echo "$FILES_WITH_WRONG_PERMISSIONS"
+    echo ''
+    echo "$FILES_WITH_WRONG_PERMISSIONS" | awk '{print $4}' | xargs -n1 printf 'Please run "\033[32msudo chmod\033[0m -x %s".\n'
+    [ -z "${GITHUB_ACTIONS+x}" ] || echo '::endgroup::'
+fi
+
+if [ -n "$BIN_FILES_WITH_WRONG_PERMISSIONS" ]; then
+    printf '\033[31mFAIL\033[0m Executable files with -x permissions were detected!\n'
+    [ -z "${GITHUB_ACTIONS+x}" ] || echo '::group::Executable files'
+    echo "$BIN_FILES_WITH_WRONG_PERMISSIONS"
+    echo -e ''
+    echo $BIN_FILES_WITH_WRONG_PERMISSIONS | awk '{print $4}' | xargs -n1 printf 'Please run "\033[32msudo chmod\033[0m +x %s".\n'
+    [ -z "${GITHUB_ACTIONS+x}" ] || echo '::endgroup::'
+fi
+
+if [ -n "$FILES_WITH_WRONG_PERMISSIONS" ]; then
+    exit 3
+elif [ -n "$BIN_FILES_WITH_WRONG_PERMISSIONS" ]; then
+    exit 4
+fi
+
+printf '\033[32mOK\033[0m No wrong permissions were detected.\n'