#!/usr/bin/env bash
# Fetch upstream source at pinned commits.
set -euo pipefail

DEST="${1:-./sources}"
mkdir -p "$DEST"

# caddyserver/caddy (Apache-2.0)
echo "fetching caddyserver/caddy @ 04fe161028"
curl -sL --max-time 600 -o "$DEST/caddy.tar.gz" \
  "https://codeload.github.com/caddyserver/caddy/tar.gz/04fe16102872eba7c017b495a9006fddae4dbdc4"

# louislam/uptime-kuma (MIT)
echo "fetching louislam/uptime-kuma @ e7420f8fa5"
curl -sL --max-time 600 -o "$DEST/uptime-kuma.tar.gz" \
  "https://codeload.github.com/louislam/uptime-kuma/tar.gz/e7420f8fa546a8baa7ac4bf9d10a32545d4346e0"

# crowdsecurity/crowdsec (MIT)
echo "fetching crowdsecurity/crowdsec @ c261e4fce6"
curl -sL --max-time 600 -o "$DEST/crowdsec.tar.gz" \
  "https://codeload.github.com/crowdsecurity/crowdsec/tar.gz/c261e4fce61560a814d04549783e1cfa03f5f425"

# gitleaks/gitleaks (MIT)
echo "fetching gitleaks/gitleaks @ b58d3f102c"
curl -sL --max-time 600 -o "$DEST/gitleaks.tar.gz" \
  "https://codeload.github.com/gitleaks/gitleaks/tar.gz/b58d3f102cf3a2c84cb7f923d05c25c9b1aed84b"

# aquasecurity/trivy (Apache-2.0)
echo "fetching aquasecurity/trivy @ 8f815546c7"
curl -sL --max-time 600 -o "$DEST/trivy.tar.gz" \
  "https://codeload.github.com/aquasecurity/trivy/tar.gz/8f815546c7b57dc11229b0098463dff0cfc9ed2c"

# projectdiscovery/nuclei (MIT)
echo "fetching projectdiscovery/nuclei @ a14b3de2a4"
curl -sL --max-time 600 -o "$DEST/nuclei.tar.gz" \
  "https://codeload.github.com/projectdiscovery/nuclei/tar.gz/a14b3de2a4bf2e2324f65b5ca44164a30af34162"

# authelia/authelia (Apache-2.0)
echo "fetching authelia/authelia @ 1eb93a5e5f"
curl -sL --max-time 600 -o "$DEST/authelia.tar.gz" \
  "https://codeload.github.com/authelia/authelia/tar.gz/1eb93a5e5f014a2aca3dcbb692137b432656e42f"

# keycloak/keycloak (Apache-2.0)
echo "fetching keycloak/keycloak @ 9b7c2d4fd7"
curl -sL --max-time 600 -o "$DEST/keycloak.tar.gz" \
  "https://codeload.github.com/keycloak/keycloak/tar.gz/9b7c2d4fd7b62f7a656fccb94bc0a9065fedaed1"

# open-policy-agent/opa (Apache-2.0)
echo "fetching open-policy-agent/opa @ 3f2d1bd960"
curl -sL --max-time 600 -o "$DEST/opa.tar.gz" \
  "https://codeload.github.com/open-policy-agent/opa/tar.gz/3f2d1bd96090b9ecf29c29fabe1eaf38883ea140"

# vectordotdev/vector (MPL-2.0)
echo "fetching vectordotdev/vector @ 9aee1f50ee"
curl -sL --max-time 600 -o "$DEST/vector.tar.gz" \
  "https://codeload.github.com/vectordotdev/vector/tar.gz/9aee1f50eefe4c077ba9d640edd7cbbe3b7dc1a2"

# juanfont/headscale (BSD-3-Clause)
echo "fetching juanfont/headscale @ eeaac680be"
curl -sL --max-time 600 -o "$DEST/headscale.tar.gz" \
  "https://codeload.github.com/juanfont/headscale/tar.gz/eeaac680bef26585c8cc1569f949e26d0d6aba80"

# traefik/traefik (MIT)
echo "fetching traefik/traefik @ fcbfb8aff2"
curl -sL --max-time 600 -o "$DEST/traefik.tar.gz" \
  "https://codeload.github.com/traefik/traefik/tar.gz/fcbfb8aff229498eddc941ea47f7bd18cbc65078"

echo "done -> $DEST"