Fixes runme when it attempts to access unreadable files or directories

main_test.go

@@ -3,6 +3,7 @@
 package main
 
 import (
+	"bufio"
 	"bytes"
 	"os"
 	"os/exec"
@@ -16,6 +17,42 @@ import (
 	"github.com/stretchr/testify/require"
 )
 
+func isDocker() bool {
+	if _, err := os.Stat("/.dockerenv"); err == nil {
+		return true
+	}
+
+	paths := []string{"/proc/1/cgroup", "/proc/self/cgroup"}
+	for _, path := range paths {
+		file, err := os.Open(path)
+		if err != nil {
+			continue
+		}
+
+		scanner := bufio.NewScanner(file)
+		isDocker := false
+		for scanner.Scan() {
+			if strings.Contains(scanner.Text(), "docker") || strings.Contains(scanner.Text(), "kubepods") {
+				isDocker = true
+				break
+			}
+		}
+
+		if err := scanner.Err(); err != nil {
+			_ = file.Close()
+			return false
+		}
+
+		_ = file.Close()
+
+		if isDocker {
+			return true
+		}
+	}
+
+	return false
+}
+
 func TestMain(m *testing.M) {
 	os.Exit(testscript.RunMain(m, map[string]func() int{
 		"runme": root,
@@ -33,6 +70,17 @@ func TestRunme(t *testing.T) {
 	})
 }
 
+func TestRunmeFilePermissions(t *testing.T) {
+	if isDocker() {
+		return
+	}
+
+	testscript.Run(t, testscript.Params{
+		Dir:             "testdata/permissions",
+		ContinueOnError: true,
+	})
+}
+
 func TestRunmeFlags(t *testing.T) {
 	testscript.Run(t, testscript.Params{
 		Dir:             "testdata/flags",

pkg/project/project.go

@@ -366,6 +366,13 @@ func (p *Project) loadFromDirectory(
 
 	err := util.Walk(p.fs, ".", func(path string, info fs.FileInfo, err error) error {
 		if err != nil {
+			if errors.Is(err, os.ErrPermission) {
+				p.logger.Warn("permission denied", zap.String("path", path), zap.Error(err))
+				if info.IsDir() {
+					return filepath.SkipDir
+				}
+				return nil
+			}
 			return err
 		}
 
@@ -455,6 +462,11 @@ func (p *Project) extractTasksFromFile(
 	})
 
 	if err != nil {
+		if errors.Is(err, os.ErrPermission) {
+			p.logger.Warn("permission denied", zap.String("path", path), zap.Error(err))
+			return
+		}
+
 		p.send(ctx, eventc, LoadEvent{
 			Type: LoadEventError,
 			Data: LoadEventErrorData{Err: err},

testdata/permissions/basic.txtar

@@ -0,0 +1,27 @@
+exec chmod 000 secret
+exec chmod 000 CONTRIBUTING.md
+exec runme ls
+cmp stdout output.txt
+! stderr .
+
+-- secret/README.md --
+
+```sh {"name":"secret-command"}
+$ echo "This is a secret command"
+```
+
+-- CONTRIBUTING.md --
+
+```sh {"name":"contributing-cell"}
+$ echo "This is a secret command"
+```
+
+-- README.md --
+
+```sh {"name":"command"}
+$ echo "Hello, runme!"
+```
+
+-- output.txt --
+NAME	FILE	FIRST COMMAND	DESCRIPTION	NAMED
+command	README.md	echo "Hello, runme!"		Yes