mitre / hipcheck

Automatically assess and score software repositories for supply chain risk.
https://mitre.github.io/hipcheck/
Apache License 2.0
62 stars 3 forks source link

Add `hc cache` subcommand for managing Hipcheck's cache #182

Closed alilleybrinker closed 1 month ago

alilleybrinker commented 2 months ago

Hipcheck creates local clones of every repository it analyzes, because analyzing a local clone is much faster than trying to work over the network. But some repositories can be quite large, and this cache will currently just continue to grow until the user notices it (ideally before something concerning like running out of disk space) and deletes some of the clones.

We ought to add an hc cache subcommand to manage the cache, probably by:

We may also want to enable configuring Hipcheck to alert when the cache directory passes some threshold. For this we probably want a default threshold, and let the user both change the threshold and to turn alerting off entirely. The alerting could take the form of a warning when Hipcheck is run.

alilleybrinker commented 1 month ago

Resolved by #224 and #236.