search

mitre / hipcheck

Automatically assess and score software repositories for supply chain risk.
https://mitre.github.io/hipcheck/
Apache License 2.0
80 stars 6 forks source link

chore: Preparing to use 'dist' for more releases. #608

Open alilleybrinker opened 2 weeks ago

alilleybrinker commented 2 weeks ago

This relies on the upgrade to the latest version of 'dist'. Since we now have plugins that we want to produce pre-built binaries for, this updates our build configuration to support that. It'll need to be tested.

alilleybrinker commented 1 week ago

Update: The dist folks are investigating this error; trying to figure out why plan is complaining, which it shouldn't be doing.

alilleybrinker commented 1 week ago

After some debugging, I was able to at least eliminate the duplication of packages found by cargo-dist. Turns out my workspace.members field in the dist-workspace.toml file was wrong; when including a Cargo virtual workspace with many distable packages in it, you only need to include the root, not each package individually.

alilleybrinker commented 1 week ago

Update: cargo-dist team is working on resolving the bug that's blocking this PR. Basically, an internal setting called needs_coherence is being incorrectly set to true for cargo dist plan. Once the fix is out I'll update this to use the patched version of cargo-dist and we can proceed.