froggit-go

froggit-go copied to clipboard

[comment]: (FrogbotReviewComment) [](https://docs.jfrog-applications.jfrog.io/jfrog-applications/frogbot) ## 📦 Vulnerable Dependencies ### ✍️ Summary | SEVERITY | DIRECT DEPENDENCIES | IMPACTED DEPENDENCY...

github-actions[bot]

Bumps google.golang.org/protobuf from 1.32.0 to 1.33.0. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependabot[bot]

Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.3.6 to 1.3.7. Release notes Sourced from github.com/cloudflare/circl's releases. CIRCL v1.3.7 What's Changed build(deps): bump golang.org/x/crypto from 0.3.1-0.20221117191849-2c476679df9a to 0.17.0 by @​dependabot in cloudflare/circl#467 kyber: remove division...

dependabot[bot]

**Describe the bug** Github introduced [API versioning](https://docs.github.com/en/rest/overview/api-versions) through the use of `X-GitHub-Api-Version` HTTP header. **Expected behavior** According to Github's documentation, Froggit-Go *must* set this header when interacting with Github.

cyrilc-pro

How to interact with and manage the remote repo or vcs provider via ssh key instead of user/pass?

2

Cool library! Got a question not addressed in the docs or the source… Setup: I use Bitbucket cloud. Seeing that the example requires a username and password for interacting with...

atljoseph

http. RoundTripper is not re-used

1

For the bitbucketserver and github vcsclient(s) the `http.RoundTripper` is not re-used, but created for each new request if `client.vcsInfo.Token` is provided. This can cause an issue because connections acquire file...

pavelmemory

Input validation

1

Required parameters are not checked before sending request to different providers. It might be nice to check the parameters and return appropriate errors.

ttetzlaff

Fail to parse date when testing a webhook with Gitlab

1

When hitting the "test" button of a webhook in Gitlab, 14.4 the date format is slightly different and Froggit-Go is failing with the following error message: ```parsing time "2021-11-30T08:52:57.746Z" as...

cyrilc-pro

Timestamp calculation results in different units (depends on git provider)

1

timestamp calculation sometimes in seconds (e.g. bitbucket cloud) and sometimes in milliseconds (e.g. bitbucket server). we should unify this behaviour.

agnieszkaW1234

Typed Errors

1

Froggit is a facade over different git providers and should provide typed error messages. The user of the library should receive clear errors and not have to have knowledge of...

ttetzlaff