cli

cli copied to clipboard

Creating Pull Request for Bitbucket Cloud

3

Currently, CLI only generates the output file. but does not create a pull request. Also, there is documentation on how to use the output file. What is the plan of...

MukulSoul

We run dependabot two different ways against the same code bases: 1. dependabot/cli (for finding vulnerabilities before alerts are created in testing) 2. github actions (for creating the alerts for...

sblatnick

Error resolving private repository for Go using git

3

We have a Go repo we are attempting to scan with dependabot/cli, but it fails with: ``` updater | 2024/02/15 21:44:00 INFO Handled error whilst updating golang.org/x/sys: dependency_file_not_resolvable {:message=>"go: bitbucket.redacted.com/scm/iums/[email protected]:...

sblatnick

Always pull the container image

2

Yes, we could query the registry client and compare the digest of the local manifest and the remote manifest. But that is more complicated than just letting Docker do that...

JamieMagee

Always pull, even if image available locally

3

If we're using a mutable tag, like `latest`, we should always try and pull the container image regardless of whether or not it's available locally. https://github.com/dependabot/cli/blob/35deb52c81b16ce706ec8601b85c589b7d483503/internal/infra/run.go#L470-L473

JamieMagee

In our README we suggest doing `go install github.com/dependabot/cli/cmd/dependabot@latest` which is nice and convenient. However, Go doesn't inject VCS info when built this way, so when you run `dependabot --version`...

jakecoffman

Credential issue with gitlab provider

1

`cli version: 1.39` Hi! I'm experiencing a credential issue, more specifically using the gitlab provider when requesting to create a pull request the commits fail to fetch. Following are my...

edramos-97

We're recently trying to be more agile at providing support for new ecosystems in dependabot-core, and I thought it would be nice for people to be able to bootstrap a...

deivid-rodriguez

Create Homebrew formula

4

We should support installation of the CLI using [Homebrew](https://brew.sh).

mattt

Credential issues when using custom source provider for bitbucket server

2

I made changes to dependabot-core to support the bitbucket server source. Everything is working fine. I started using cli verify certain things a few days back and everything was working...

noorul