sonatype-nexus-community / chelsea

Dependency vulnerability auditor for Ruby
Apache License 2.0
14 stars 11 forks source link

Allow chelsea to set config for OSS Index #14

Closed DarthHater closed 4 years ago

DarthHater commented 4 years ago

So that someone can provide their username and token for communicating with OSS Index (so that they can get a higher rate limit), we could create a way for someone to set a more persistent config.

In the other tools we have worked on we created an interactive experience on the command line for setting config.

We ask for:

We save this by default to: ~/.ossindex/.oss-index-config

As yaml, with the keys: Username and Token, as this config can be shared amongst all the tools.

This work could also add command line flags for a username and token for OSS Index, and implement the POST request to use those as basic auth, as well as if someone has provided config, command line flags should override it.

DarthHater commented 4 years ago

This is done.