alire-project / alire

Command-line tool from the Alire project and supporting library
GNU General Public License v3.0
288 stars 49 forks source link

Adding trusted sites #814

Open Patschkowski opened 3 years ago

Patschkowski commented 3 years ago

Dear all,

we are very close to fully adopting Alire for our projects. External dependencies are pulled from the Alire index.

What we still want to do is also split our internal dependencies into different repos. Currently, all our code lives in one repo.

Due to IP we can not host the repos externally on the trusted sites that are currently allowed by Alire. Is there a way we can add our in-house Git server to the list of trusted sites?

Kind regards, Felix

Fabien-Chouteau commented 3 years ago

Hello @Patschkowski,

My understanding is that this trusted site check is only made in the alr publish command. You don't have to use this command to publish a crate in your local index. Just renaming the alire.toml into <crate_name>-<crate_version>.toml and adding

[origin]
commit = "ac734659560ffa98346c4ddc97d8966471d70374"
url = "git+https://github.com/alire-project/clic.git"

should be enough.

What we can try to do in future versions is to read a list of trusted sites from the user configuration files.

Patschkowski commented 3 years ago

Hi @Fabien-Chouteau,

your proposal works very well for us. Thank you

Looking forward to the solution you come up with! Felix