rust-secure-code/cargo-supply-chain issues and pull requests

#97 - Add --offline capability

Issue - State: open - Opened by matthiasbeyer 7 months ago - 1 comment

#96 - Use `xdg` instead of `directories-next`; correct typo in directory name

Pull Request - State: closed - Opened by smoelius 8 months ago - 6 comments

#95 - Upgrade to bpaf 0.9.1

Pull Request - State: closed - Opened by pacak over 1 year ago - 4 comments

#94 - Create git tags for releases

Issue - State: closed - Opened by figsoda over 1 year ago - 2 comments

#93 - Add `--no-dev` option

Pull Request - State: closed - Opened by smoelius over 1 year ago - 13 comments

#92 - Upgrade bpaf to 0.7 to remove some turbofishes

Pull Request - State: closed - Opened by pacak about 2 years ago - 24 comments

#91 - Migrate to bpaf v0.6

Pull Request - State: closed - Opened by Shnatsel about 2 years ago - 4 comments

#90 - bpaf 0.5.0 release

Pull Request - State: closed - Opened by pacak about 2 years ago - 1 comment

#81 - Anyhow error handling tweaks

Pull Request - State: closed - Opened by Shnatsel over 2 years ago - 1 comment

#80 - Return anyhow error instead of calling err_exit

Pull Request - State: closed - Opened by ugandalf over 2 years ago - 2 comments

#79 - new bpaf + minor parser cli refactors

Pull Request - State: closed - Opened by pacak over 2 years ago - 1 comment

#78 - Consider transparently downloading the DB dump instead of fetching live results by default

Issue - State: open - Opened by Shnatsel over 2 years ago - 3 comments
Labels: enhancement

#77 - Prettier cli code

Pull Request - State: closed - Opened by Shnatsel over 2 years ago - 1 comment

#76 - Run tests on CI

Issue - State: closed - Opened by Shnatsel over 2 years ago - 2 comments
Labels: good first issue

#75 - Turn schema-rs into a dev dependency; do not download and build it in prod

Pull Request - State: closed - Opened by Shnatsel over 2 years ago

#74 - Migrate to `anyhow` crate for error handling

Issue - State: closed - Opened by Shnatsel over 2 years ago
Labels: good first issue

#73 - Major CLI revamp

Pull Request - State: closed - Opened by Shnatsel over 2 years ago - 1 comment

#72 - Schema not regenerated every time

Pull Request - State: closed - Opened by ugandalf over 2 years ago - 1 comment

#71 - "update" subcommand and tests in general

Pull Request - State: closed - Opened by ugandalf over 2 years ago - 2 comments

#70 - Reject arguments that don't make sense for `update` subcommand

Issue - State: closed - Opened by Shnatsel over 2 years ago

#69 - Argument validation split from argument handling

Pull Request - State: closed - Opened by ugandalf over 2 years ago - 1 comment

#68 - Long incremental build times due to JSON schema generation

Issue - State: closed - Opened by Shnatsel over 2 years ago - 1 comment
Labels: enhancement, good first issue

#67 - Allow excluding dev-dependencies

Issue - State: closed - Opened by Nemo157 about 3 years ago - 7 comments
Labels: enhancement

#66 - Flag optional dependencies or publishers

Issue - State: open - Opened by Shnatsel over 3 years ago
Labels: enhancement, help wanted

#65 - Redone error exit system

Pull Request - State: closed - Opened by Owez over 3 years ago - 5 comments

#64 - Moved help command into readme for better looks

Pull Request - State: closed - Opened by Owez over 3 years ago - 1 comment

#63 - Drop 'url' field since it's not present in the DB dumps

Pull Request - State: closed - Opened by Shnatsel over 3 years ago

#62 - Diff-friendly output mode

Pull Request - State: closed - Opened by Shnatsel over 3 years ago - 2 comments

#61 - `url` field missing in JSON output when using cached data

Issue - State: closed - Opened by Shnatsel over 3 years ago - 1 comment
Labels: bug

#60 - Two-phase commit for cache updates

Pull Request - State: closed - Opened by Shnatsel over 3 years ago

#59 - Pretty progress bar for fetching live data

Pull Request - State: closed - Opened by Shnatsel over 3 years ago - 2 comments

#58 - Update cache timestamp only on success

Pull Request - State: closed - Opened by Shnatsel over 3 years ago - 4 comments

#57 - Use nice progressbars for fetching data from live API

Issue - State: closed - Opened by Shnatsel over 3 years ago
Labels: enhancement, good first issue

#56 - Add warning and improve progress output when unknown length

Pull Request - State: closed - Opened by Nemo157 over 3 years ago - 1 comment

#55 - Add indicatif based progress bar during updates

Pull Request - State: closed - Opened by Nemo157 over 3 years ago - 3 comments

#54 - Output should be consistently sorted

Issue - State: closed - Opened by Nemo157 over 3 years ago - 2 comments

#53 - Cancelling `cargo supply-chain update` leaves it believing it is up to date

Issue - State: closed - Opened by Nemo157 over 3 years ago - 3 comments
Labels: bug

#52 - Deal with terminal control sequences in crates.io/Github usernames

Issue - State: closed - Opened by Shnatsel over 3 years ago - 4 comments

#51 - Initial stab at structured output in JSON

Pull Request - State: closed - Opened by Shnatsel over 3 years ago - 7 comments

#50 - Added JSON support.

Pull Request - State: closed - Opened by zebambam over 3 years ago - 13 comments

#49 - Output is not available in json

Issue - State: closed - Opened by zebambam over 3 years ago - 6 comments

#48 - Cache "live" results from crates.io

Issue - State: open - Opened by Shnatsel over 3 years ago - 7 comments
Labels: enhancement, help wanted

#47 - Cleaned up crates merging & added 1 to publisher ind

Pull Request - State: closed - Opened by Owez over 3 years ago - 1 comment

#46 - Help shows commands misaligned

Issue - State: closed - Opened by Nemo157 over 3 years ago - 3 comments

#45 - Crate fetching is slow

Issue - State: open - Opened by Owez over 3 years ago - 9 comments

#44 - Could not load platform certs: "The Trust Settings Record was corrupted."

Issue - State: open - Opened by trevyn over 3 years ago - 4 comments
Labels: bug

#43 - Strict `CFLAGS` break the build

Issue - State: closed - Opened by noncombatant over 3 years ago - 3 comments

#42 - Less cloning

Pull Request - State: closed - Opened by BlackHoleFox almost 4 years ago - 5 comments

#41 - Update to ureq2

Pull Request - State: closed - Opened by BlackHoleFox almost 4 years ago - 1 comment

#40 - Split argument validation into a separate function

Issue - State: closed - Opened by Shnatsel almost 4 years ago
Labels: good first issue

#39 - Migrate to ureq 2.0

Issue - State: closed - Opened by Shnatsel almost 4 years ago
Labels: good first issue

#38 - Drop 'authors' subcommand

Pull Request - State: closed - Opened by Shnatsel almost 4 years ago - 1 comment

#37 - Detailed help for each command

Issue - State: closed - Opened by Shnatsel almost 4 years ago
Labels: documentation, enhancement

#36 - Removing help commands from README.md

Issue - State: closed - Opened by Owez almost 4 years ago

#35 - Better CLI help formatting with em dashes to simplify

Pull Request - State: closed - Opened by Owez almost 4 years ago - 8 comments

#34 - Fixed bug with supply_args filtering for cargo arg

Pull Request - State: closed - Opened by Owez almost 4 years ago - 1 comment

#33 - Licenses

Issue - State: closed - Opened by taladar almost 4 years ago - 3 comments

#32 - Fix 'update' command reporting success on network failure

Pull Request - State: closed - Opened by Shnatsel almost 4 years ago

#31 - Handle invalid arguments

Pull Request - State: closed - Opened by dutt almost 4 years ago

#30 - Does not complain about invalid arguments

Issue - State: closed - Opened by Shnatsel almost 4 years ago - 1 comment
Labels: bug, good first issue

#29 - Capitalized README.md + CHANGELOG.md & partially refractored

Pull Request - State: closed - Opened by Owez almost 4 years ago - 1 comment

#28 - Add progress indication to `update` subcommand

Issue - State: closed - Opened by Shnatsel almost 4 years ago - 6 comments
Labels: enhancement, good first issue

#27 - Argument parser & No network panic

Pull Request - State: closed - Opened by dutt almost 4 years ago - 3 comments

#26 - Use an argument parser

Issue - State: closed - Opened by Shnatsel almost 4 years ago - 5 comments
Labels: good first issue

#25 - Provide a way to filter out crates

Issue - State: closed - Opened by jyn514 about 4 years ago - 5 comments

#24 - Authors are duplicated if the registry differs

Issue - State: closed - Opened by jyn514 about 4 years ago - 1 comment

#23 - Don't panic if the current directory is not a cargo project

Issue - State: closed - Opened by jyn514 about 4 years ago - 1 comment
Labels: good first issue

#22 - `update` does nothing and says it succeeded if you're offline

Issue - State: closed - Opened by jyn514 about 4 years ago
Labels: bug, good first issue

#21 - What does `cargo supply-chain update` do?

Issue - State: closed - Opened by jyn514 about 4 years ago - 4 comments
Labels: question

#20 - The option to use database dumps instead of crates.io API is not apparent

Issue - State: open - Opened by jyn514 about 4 years ago - 6 comments
Labels: question

#19 - 'authors' always shows 'unknown registry'

Issue - State: closed - Opened by jyn514 about 4 years ago - 2 comments

#18 - Update changes and version

Pull Request - State: closed - Opened by HeroicKatora about 4 years ago - 5 comments

#17 - Cached data dumps

Pull Request - State: closed - Opened by HeroicKatora about 4 years ago - 2 comments

#16 - Cached data dumps

Pull Request - State: closed - Opened by HeroicKatora about 4 years ago - 1 comment

#15 - Newly downloaded cache is considered expired

Issue - State: closed - Opened by Shnatsel about 4 years ago - 3 comments
Labels: bug

#14 - Cached data dumps

Pull Request - State: closed - Opened by HeroicKatora about 4 years ago - 2 comments

#13 - Cache of crates.io data dumps should expire

Issue - State: closed - Opened by HeroicKatora about 4 years ago - 1 comment

#12 - Cached data dumps

Pull Request - State: closed - Opened by HeroicKatora about 4 years ago - 6 comments

#11 - Don't panic on network failure

Issue - State: closed - Opened by Shnatsel about 4 years ago - 2 comments
Labels: good first issue

#10 - Fix syntax of workflow actions

Pull Request - State: closed - Opened by HeroicKatora about 4 years ago - 1 comment

#9 - Grab the publisher of the exact version used as dependency

Issue - State: open - Opened by HeroicKatora about 4 years ago
Labels: enhancement

#8 - Faster crates.io fetching?

Issue - State: closed - Opened by repi about 4 years ago - 9 comments
Labels: enhancement

#7 - Too many crates are included in the analysis

Issue - State: closed - Opened by Shnatsel about 4 years ago - 1 comment

#6 - Transition to Github workflows

Pull Request - State: closed - Opened by HeroicKatora about 4 years ago - 2 comments

#5 - Dependencies from other platforms are reported as "not from crates.io"

Issue - State: closed - Opened by Shnatsel about 4 years ago

#4 - Provide an option to restrict analysis to a specific platform

Issue - State: closed - Opened by Shnatsel about 4 years ago - 1 comment
Labels: enhancement, good first issue

#3 - Provide a crates-centric view of publishers

Issue - State: closed - Opened by Shnatsel about 4 years ago - 1 comment
Labels: enhancement

#2 - Support invocation via `cargo supply-chain`

Issue - State: closed - Opened by Shnatsel about 4 years ago - 1 comment
Labels: good first issue

#1 - Ci setup

Pull Request - State: closed - Opened by HeroicKatora about 4 years ago

GitHub / rust-secure-code/cargo-supply-chain issues and pull requests