mitre / hipcheck

Automatically assess and score software repositories for supply chain risk.
https://mitre.github.io/hipcheck/
Apache License 2.0
80 stars 6 forks source link

feat: improve error handling if plugin entrypoint does not exist #606

Closed patrickjcasey closed 2 weeks ago

patrickjcasey commented 2 weeks ago

Closes #583

With the current codebase and plugins that we have, this check works, but if an entrypoint is not kicking off a binary and runs a docker image or runs python3 -m ... or does anything outside of how our plugins work today, this will likely fail. Maybe this should just log a warning that it could not find the provided file and still try to spawn the plugin?