gcgit v1.0.2 release

- Enhanced `init` command: auto git repo + .gitignore with *.toml (protects API keys)
- Dependency updates: clap 4.5, reqwest 0.12, git2 0.19, tokio 1.47 + 46 security patches
- Fixed import error (GitRepo → GitWrapper), improved build stability, reduced warnings
- Backward compatible with existing functionality

Signed-off-by: Simon Sigré <simon.sigre@gmail.com>

Author: simonsigre

src/.DS_Store .DS_Storesrc/.DS_Store renamed to .DS_Store

@@ -1,6 +1,6 @@
 [package]
 name = "gcgit"
-version = "1.0.0"
+version = "1.0.2"
 edition = "2021"
 description = "A Rust-based CLI tool for version-controlling Cortex XSIAM configurations"
 authors = ["gcgit team"]
@@ -14,15 +14,15 @@ name = "gcgit"
 path = "src/main.rs"
 
 [dependencies]
-clap = { version = "4.0", features = ["derive"] }
+clap = { version = "4.5", features = ["derive"] }
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
 serde_yaml = "0.9"
 schemars = { version = "0.8", features = ["derive"] }
 toml = "0.8"
-reqwest = { version = "0.11", features = ["json", "rustls-tls"], default-features = false }
-git2 = { version = "0.18", default-features = false, features = ["vendored-openssl"] }
-tokio = { version = "1.0", features = ["full"] }
+reqwest = { version = "0.12", features = ["json", "rustls-tls"], default-features = false }
+git2 = { version = "0.19", default-features = false, features = ["vendored-openssl"] }
+tokio = { version = "1.47", features = ["full"] }
 anyhow = "1.0"
 uuid = { version = "1.0", features = ["v4"] }
 chrono = { version = "0.4", features = ["serde"] }

Cargo.lock

@@ -2,6 +2,7 @@
 
 Go Cortex Git is a Rust-based command-line interface (CLI) tool designed to serve as a lightweight abstraction layer between local Git operations and the Cortex XSIAM REST API. Its purpose is to enable security teams to version-control and deploy Cortex XSIAM configuration objects—such as Correlation Searches, Dashboards, BIOCs, and Scripts—without requiring a full-scale CI/CD pipeline or remote Git hosting. By wrapping standard Git workflows and translating file changes into corresponding API actions, gcgit streamlines content management within XSIAM while keeping everything local and traceable via Git.
 
+
 ## Quick Start
 
 ### 1. Install gcgit

Cargo.toml

@@ -42,17 +42,26 @@ impl XsiamClient {
         let endpoint = self.get_delete_endpoint(&object.content_type);
         let url = format!("https://{}/public_api/v1/{}", self.config.fqdn, endpoint);
 
+        // Get the correct request data format based on content type
+        let registry = crate::content_types::ContentTypeRegistry::new();
+        let request_data = if let Some(config) = registry.get(&object.content_type) {
+            config.get_request_data(&object.id)
+        } else {
+            // Fallback for unknown content types
+            serde_json::json!({
+                "request_data": {
+                    "id": object.id
+                }
+            })
+        };
+
         let response = self.client
             .post(&url)
             .header("x-xdr-auth-id", &self.config.api_key_id)
             .header("Authorization", &self.config.api_key)
             .header("Content-Type", "application/json")
             .header("Accept", "application/json")
-            .json(&serde_json::json!({
-                "request_data": {
-                    "rule_id": object.id
-                }
-            }))
+            .json(&request_data)
             .send()
             .await
             .with_context(|| format!("Failed to send delete request to {}", url))?;
@@ -516,14 +525,27 @@ impl XsiamClient {
         let endpoint = self.get_delete_endpoint(content_type);
         let url = format!("https://{}/public_api/v1/{}", self.config.fqdn, endpoint);
 
-        // Delete request format: {"request_data": {"objects_count": N, "objects": [id1, id2, ...]}}
-        let id_num = id.parse::<i64>().unwrap_or(0);
-        let request_data = serde_json::json!({
-            "request_data": {
-                "objects_count": 1,
-                "objects": [id_num]
+        // Get the correct request data format based on content type
+        let registry = crate::content_types::ContentTypeRegistry::new();
+        let request_data = if let Some(config) = registry.get(content_type) {
+            config.get_request_data(id)
+        } else {
+            // Fallback for unknown content types - try both string and integer IDs
+            if let Ok(id_num) = id.parse::<i64>() {
+                serde_json::json!({
+                    "request_data": {
+                        "objects_count": 1,
+                        "objects": [id_num]
+                    }
+                })
+            } else {
+                serde_json::json!({
+                    "request_data": {
+                        "id": id
+                    }
+                })
             }
-        });
+        };
 
         let response = self.client
             .post(&url)

README.md

@@ -3,6 +3,7 @@ use serde::{Deserialize, Serialize};
 use std::fs;
 use std::path::Path;
 use std::env;
+use crate::git_wrapper::GitWrapper;
 
 #[derive(Debug, Deserialize, Serialize)]
 pub struct XsiamConfig {
@@ -153,6 +154,16 @@ instance_name = "{}"
         fs::write(&config_path, config_content)
             .with_context(|| format!("Failed to write config file: {}", config_path))?;
 
+        // Initialize git repository
+        let _git_repo = GitWrapper::new(instance_name)
+            .with_context(|| format!("Failed to initialize git repository in: {}", instance_name))?;
+
+        // Create .gitignore file to exclude config.toml from version control
+        let gitignore_path = format!("{}/.gitignore", instance_name);
+        let gitignore_content = "*.toml\n";
+        fs::write(&gitignore_path, gitignore_content)
+            .with_context(|| format!("Failed to create .gitignore file: {}", gitignore_path))?;
+
         Ok(())
     }
 }

src/api.rs

@@ -87,8 +87,8 @@ impl ContentTypeRegistry {
             get_endpoint: "authentication-settings/get/settings",
             insert_endpoint: "authentication-settings/insert",
             delete_endpoint: "authentication-settings/delete",
-            id_field: "id",
-            request_id_key: "id",
+            id_field: "name",
+            request_id_key: "name",
         });
 
         // Example for future content types: