mitre / hipcheck

Automatically assess and score software repositories for supply chain risk.
https://mitre.github.io/hipcheck/
Apache License 2.0
62 stars 3 forks source link

feat(CLI): CLI can infer target from VCS URL #209

Closed mchernicoff closed 1 month ago

mchernicoff commented 1 month ago

Resolves issue #185

hc check will now attempt to resolve the target repo from a given target VCS URL (see here. Currently we support remote Git repo URLs and local Git repo filepaths. If a target type can be resolved, Hipcheck will extract the information it needs to run from the VCS URL.

We currently ignore any additional Git ref information that may be provided with the VCS URL. We assume that if such a ref is given, it follows the VCS URL convention of git+https://github.com/owner/repo.git@ref, with the ".git" suffix provided before the "@".