spinframework / spinframework/spin

consider removing prompt when installing plugin

Open
#2,368 4 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

area/plugins good first issue
Dominant language
Rust
Stars
6.5k
Forks
310
Avg merge
1d 20h
Merged PRs (30d)
24

Description

krew, kubectls plugin manager displays the following message instead of prompting to confirm installation of the plugin:

WARNING: You installed plugin "reverse-proxy" from the krew-index plugin repository.
   These plugins are not audited for security by the Krew maintainers.
   Run them at your own risk.

It would be nice to let people know they installed something we have not audited and skip the prompt step. I don't there is ever going to be a time when I say no and I always forget to use the --yes flag.

I'd love to see either of the following:

  • Map environment variable to value of the --yes flag so that you could set false if you are more cautious and want to be prompted.
  • Make default behavior more like krew's warning rather than prompting to confirm installation

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by locating the Spin CLI code that handles plugin installation and the existing --yes confirmation path. Compare the requested environment-variable behavior with changing the default to a warning, then verify that installation proceeds without an unwanted prompt while cautious users can still require confirmation.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
cli
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.