mitre / hipcheck

Automatically assess and score software repositories for supply chain risk.
https://mitre.github.io/hipcheck/
Apache License 2.0
62 stars 3 forks source link

Enable users to provide "VCS URLs" as targets #185

Closed alilleybrinker closed 1 month ago

alilleybrinker commented 2 months ago

The pip package manager from the Python ecosystem specifies "VCS URLs," which actually appear in many other contexts and tools as a sort of informal specification. These URLs are a way of encoding some source repository information in a URL in a way that actually closely matches the information we care about for Hipcheck source repository targets anyway. It would be good to explicitly add support for these as targets in Hipcheck.

https://pip.pypa.io/en/stable/topics/vcs-support/