gosec icon indicating copy to clipboard operation
gosec copied to clipboard

Suggestions for improving install process

Open johnsaigle opened this issue 1 year ago • 0 comments

The install.sh script seems to have been copied from the main gosec project. Trying to use it according to the instructions in the README does not work. The script itself points to the other repository.

Install script points to the wrong repository

The install script could be tackled in one of the 3 ways:

  • Modify the install script using godownloader. (However godownloader is abandoned).
  • Using the install script as a guide, modify it manually to point to this repository. Would also require publishing the corresponding binaries on the release page.
  • Delete the install script and instruct users to install from source

M1 support

In addition, the output of the install script will fail for Apple Silicon users (M1 and M2 chips) because it is not in the hard-coded list of supported architectures. Accordingly, it fails with a message that the architecture is not supported. However, it's possible to build and run the tool painlessly using a simple make if one downloads the source.

Support could be added by adding a line to the install script for darwin/arm64. I don't think this architecture and OS combination existed when this install script was written.

johnsaigle avatar Sep 21 '22 20:09 johnsaigle