fix(devbox): support linux stat in checks

Author: altaywtf

scripts/audit/personal.sh

@@ -186,7 +186,7 @@ section "Codex log size"
 if [ -d "$HOME/.codex" ]; then
   while IFS= read -r log_path; do
     [ -n "$log_path" ] || continue
-    log_size="$(stat -f '%z' "$log_path" 2>/dev/null || printf 0)"
+    log_size="$(size_of "$log_path" 2>/dev/null || printf 0)"
     if [ "$log_size" -ge 524288000 ]; then
       fail_check "$log_path is larger than 500 MB"
     elif [ "$log_size" -ge 209715200 ]; then

scripts/lib/audit.sh

@@ -35,13 +35,32 @@ json_string() {
 }
 
 mode_of() {
+  if stat -c '%a' "$1" >/dev/null 2>&1; then
+    stat -c '%a' "$1"
+    return
+  fi
+
   stat -f '%Lp' "$1"
 }
 
 owner_of() {
+  if stat -c '%U' "$1" >/dev/null 2>&1; then
+    stat -c '%U' "$1"
+    return
+  fi
+
   stat -f '%Su' "$1"
 }
 
+size_of() {
+  if stat -c '%s' "$1" >/dev/null 2>&1; then
+    stat -c '%s' "$1"
+    return
+  fi
+
+  stat -f '%z' "$1"
+}
+
 check_mode_any() {
   local missing_severity="$1"
   local path="$2"

scripts/lib/infisical.sh

@@ -48,3 +48,12 @@ infisical_mint_machine_token() {
     --plain \
     --silent
 }
+
+infisical_file_mode() {
+  if stat -c '%a' "$1" >/dev/null 2>&1; then
+    stat -c '%a' "$1"
+    return
+  fi
+
+  stat -f '%Lp' "$1"
+}

scripts/secrets/configure-infisical-devbox.sh

@@ -24,7 +24,7 @@ fail() {
 }
 
 mode_of() {
-  stat -f '%Lp' "$1"
+  infisical_file_mode "$1"
 }
 
 quote_assignment() {

scripts/secrets/infisical-devbox-run.sh

@@ -24,7 +24,7 @@ fail() {
 }
 
 mode_of() {
-  stat -f '%Lp' "$1"
+  infisical_file_mode "$1"
 }
 
 load_required_config() {

scripts/verify/devbox-services.sh

@@ -49,7 +49,7 @@ fail() {
 }
 
 mode_of() {
-  stat -f '%Lp' "$1"
+  infisical_file_mode "$1"
 }
 
 owner_of() {