Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Curation go support #67

Merged
merged 13 commits into from
Jun 10, 2024
Merged

Curation go support #67

merged 13 commits into from
Jun 10, 2024

Conversation

asafambar
Copy link
Contributor

@asafambar asafambar commented May 23, 2024

  • The pull request is targeting the dev branch.
  • The code has been validated to compile successfully by running go vet ./....
  • The code has been formatted properly using go fmt ./....
  • All static analysis checks passed.
  • All tests have passed. If this feature is not already covered by the tests, new tests have been added.
  • All changes are detailed at the description. if not already covered at JFrog Documentation, new documentation have been added.

Depends on:


PR description:

This PR introduces curation support for Go. It utilizes the curation audit API to successfully build Go dependencies and saves the downloaded packages in an alternative cache during the tree construction. Once the complete Go project tree is built, it retrieves the curation status for each node in the tree.

Examples of jf curation-audit output for Go project:

image

@attiasas attiasas added the improvement Automatically generated release notes label May 30, 2024
@attiasas attiasas self-requested a review May 30, 2024 07:01
@attiasas attiasas added the safe to test Approve running integration tests on a pull request label May 30, 2024
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label May 30, 2024
Copy link
Contributor

@attiasas attiasas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • Please add description to the PR (Min req, maybe also a screen shot of running curation on go)
  • Please update documentaion and link the PR to this
  • Please expend the integration tests TestCurationAudit to also include the new package managers projects. (currently only npm exists)

utils/paths.go Outdated Show resolved Hide resolved
commands/curation/curationaudit.go Outdated Show resolved Hide resolved
commands/curation/curationaudit.go Outdated Show resolved Hide resolved
commands/curation/curationaudit.go Outdated Show resolved Hide resolved
commands/curation/curationaudit_test.go Show resolved Hide resolved
Comment on lines 440 to 444
defer func() {
cacheFolder, err := utils.GetCurationCacheFolder()
require.NoError(t, err)
assert.NoError(t, fileutils.RemoveTempDir(cacheFolder))
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why it was removed?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

you can delete go cache only with sudo or root, now that you mention it, I will return it without failing on permission err

commands/audit/sca/go/golang.go Show resolved Hide resolved
commands/audit/sca/go/golang.go Show resolved Hide resolved
commands/audit/sca/common.go Outdated Show resolved Hide resolved
@asafambar asafambar added the safe to test Approve running integration tests on a pull request label Jun 3, 2024
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Jun 3, 2024
@asafambar asafambar added the safe to test Approve running integration tests on a pull request label Jun 3, 2024
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Jun 3, 2024
@attiasas attiasas added the safe to test Approve running integration tests on a pull request label Jun 4, 2024
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Jun 4, 2024
@asafambar asafambar added the safe to test Approve running integration tests on a pull request label Jun 4, 2024
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Jun 4, 2024
@asafambar asafambar added the safe to test Approve running integration tests on a pull request label Jun 4, 2024
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Jun 4, 2024
@asafambar asafambar added the safe to test Approve running integration tests on a pull request label Jun 5, 2024
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Jun 5, 2024
@asafambar asafambar added the safe to test Approve running integration tests on a pull request label Jun 10, 2024
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Jun 10, 2024
Copy link

👍 Frogbot scanned this pull request and did not find any new security issues.


@attiasas attiasas merged commit 4170f2e into jfrog:dev Jun 10, 2024
9 checks passed
@attiasas attiasas changed the title curation go support Curation go support Jun 10, 2024
@attiasas attiasas added new feature Automatically generated release notes and removed improvement Automatically generated release notes labels Jun 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
new feature Automatically generated release notes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants