wolfi-dev / wolfi-dev/wolfictl
Prevent adding an advisory "fixed version" that hasn't been reached yet by the package
Open
@rawlingsj is already working on this.
Since Mar 9, 2023.
- Dominant language
- Go
- Stars
- 73
- Forks
- 86
- Avg merge
- 7d 7h
- Merged PRs (30d)
- 15
Description
E.g. see https://github.com/wolfi-dev/os/pull/716
Ideally, wolfictl would catch that this advisory entry was for a version of the package that doesn't exist yet and would prevent this state from resulting in the YAML file.
On top of that, it'd be great if wolfictl didn't require the user to specify a fixed version at all, but could infer it from the package version.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.