sonatype-nexus-community / nancy

A tool to check for vulnerabilities in your Golang dependencies, powered by Sonatype OSS Index
Apache License 2.0
564 stars 74 forks source link

Usage when improper command #117

Closed zendern closed 4 years ago

zendern commented 4 years ago
zender [projects/oss/nancy]  master ✔ → nancy --thisaintright                                                                                      [a76019e]
open /Users/zender/.ossindex/.oss-index-config: no such file or directory
flag provided but not defined: -thisaintright
Usage:
    go list -m all | nancy [options]
    go list -m all | nancy iq [options]
    nancy config
    nancy [options] </path/to/Gopkg.lock>
    nancy [options] </path/to/go.sum>

Options:
  -clean-cache
        Deletes local cache directory
  -exclude-vulnerability value
        Comma separated list of CVEs to exclude
  -exclude-vulnerability-file string
        Path to a file containing newline separated CVEs to be excluded (default "./.nancy-ignore")
  -help
        provides help text on how to use nancy
  -no-color
        indicate output should not be colorized
  -output string
        Styling for output format. ["json-pretty" "text" "csv" "json"] (default "text")
  -quiet
        indicate output should contain only packages with vulnerabilities
  -token string
        Specify OSS Index API token for request
  -user string
        Specify OSS Index username for request
  -v    Set log level to Info
  -version
        prints current nancy version
  -vv
        Set log level to Debug
  -vvv
        Set log level to Trace

cc @bhamail / @DarthHater

zendern commented 4 years ago

@bhamail do you think #134 would clean this up too??

bhamail commented 4 years ago

@bhamail do you think #134 would clean this up too??

@zendern Yes, good point. I do think the move to Cobra commands will fix this issue.

deadlysyn commented 4 years ago

Just confirming, hunting around for hacktoberfest ideas and it sounds like there is no work left to do here after #134 is completed?

bhamail commented 4 years ago

@deadlysyn Correct. I would say this is fixed by #161