jfrog / jfrog/jfrog-cli-security
Introduce non-interactive mode to "jf curation-audit" command
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 13
- Forks
- 50
- Avg merge
- 3d 48m
- Merged PRs (30d)
- 26
Description
Is your feature request related to a problem? Please describe.
I'm running js curation-audit --include-cached-packages as a step in a wider security scan/curation process in a CICD Pipeline. Annoyingly, it always asks:
Do you want to request a waiver for any of the listed packages? (y/n) [n]?
Describe the solution you'd like to see
- Ideally:
jf curation-audit --non-interactivewith no questions being asked, - Or anything else, really, that would allow skipping this question.
Describe alternatives you've considered
Current workaround:
echo "n" | jf curation-audit --include-cached-packages
Additional context
N/A
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at the implementation and tests for the jf curation-audit command, then run it with --include-cached-packages to observe the waiver prompt. Add a non-interactive option that skips questions and verify that the command completes without prompting in the CI/CD use case.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- cli, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 68/100