search

mitre / hipcheck

Automatically assess and score software repositories for supply chain risk.
https://mitre.github.io/hipcheck/
Apache License 2.0
50 stars 3 forks source link

Lock repo directory during analysis. #199

Open vcfxb opened 3 weeks ago

vcfxb commented 3 weeks ago

Accidentally deleted the local clone of a repo while hipcheck was analyzing it, causing a variety of errors. It would be good if we could use fs4 or a similar crate to lock the directory until analysis is over.

alilleybrinker commented 3 weeks ago

File locks are a good idea. I wasn't aware of fs4 before, but it looks good.

We should also consider the possibility of needing to still create clones of local repos. See #183