search

sonatype-nexus-community / nancy

A tool to check for vulnerabilities in your Golang dependencies, powered by Sonatype OSS Index
Apache License 2.0
549 stars 76 forks source link

Wrong brew tap on gonancy.dev #261

Open jenslauterbach opened 2 years ago

jenslauterbach commented 2 years ago

Install nancy on macOS using brew. To do this I used the documentation on https://gonancy.dev which provides the following commands:

$ brew tap sonatype-nexus-community/tap
$ brew install nancy

This causes the following error:

$ brew tap sonatype-nexus-community/tap
==> Tapping sonatype-nexus-community/tap
Cloning into '/usr/local/Homebrew/Library/Taps/sonatype-nexus-community/homebrew-tap'...
remote: Enumerating objects: 14, done.
remote: Total 14 (delta 0), reused 0 (delta 0), pack-reused 14
Receiving objects: 100% (14/14), done.
Resolving deltas: 100% (2/2), done.
Error: Invalid formula: /usr/local/Homebrew/Library/Taps/sonatype-nexus-community/homebrew-tap/Formula/nancy.rb
nancy: Calling bottle :unneeded is disabled! There is no replacement.
Please report this issue to the sonatype-nexus-community/tap tap (not Homebrew/brew or Homebrew/core):
  /usr/local/Homebrew/Library/Taps/sonatype-nexus-community/homebrew-tap/Formula/nancy.rb:6

Error: Cannot tap sonatype-nexus-community/tap: invalid syntax in tap!

The reason is that the tap appears to be outdated.

Installing nancy on macOS using brew.

Update the documentation on https://gonancy.dev

At the moment the documentation states:

$ brew tap sonatype-nexus-community/tap
$ brew install nancy

It should be:

$ brew tap sonatype-nexus-community/nancy-tap
$ brew install nancy

I'd create a PR myself but was not able to find the repo where https://gonancy.dev is managed.

cc @bhamail / @DarthHater

bhamail commented 2 years ago

@jenslauterbach Thanks for reporting this! First: The correct brew command is shown on the nancy github page here: https://github.com/sonatype-nexus-community/nancy#install-via-homebrew-macos

Second: I'm actually not familiar with gonancy.dev. If you find more information about it, please post. I'm looking for more info too.

Third: I'll be sure to laugh loudly when I figure out I posted that site somehow, and have no memory of doing it...