rust-secure-code / cargo-supply-chain

Gather author, contributor and publisher data on crates in your dependency graph.
Apache License 2.0
313 stars 18 forks source link

Reject arguments that don't make sense for `update` subcommand #70

Closed Shnatsel closed 2 years ago

Shnatsel commented 2 years ago

Currently cargo supply-chain does not error out when called like this:

cargo supply-chain update --diffable -- --filter-platform=x86_64-unknown-linux-gnu

which is a rather nonsensical set of arguments, since neither --diffable nor the cargo-metadata arguments are applicable in this context: we have no useful output to diff and we never call cargo metadata from the update subcommand.