vulsio / gost

Build a local copy of Security Tracker. Notify via E-mail/Slack if there is an update.
MIT License
133 stars 44 forks source link

chore(deps): use go-git v5 #261

Closed MaineK00n closed 5 months ago

MaineK00n commented 5 months ago

What did you implement:

Fixes:

Type of change

How Has This Been Tested?

$ docker run --rm -it alpine:3.20 sh
/ # apk add --no-cache go make
/ # wget https://github.com/vulsio/gost/archive/refs/heads/MaineK00n/go-git-v5.tar.gz
/ # tar -xvf go-git-v5.tar.gz
/ # cd gost-MaineK00n-go-git-v5/
/gost-MaineK00n-go-git-v5 # git
sh: git: not found
/gost-MaineK00n-go-git-v5 # make build

// first fetch: clone to ~/.cache/gost/vuln-list-redhat
/gost-MaineK00n-go-git-v5 # ./gost fetch redhat

// replace ~/.cache/gost/vuln-list-redhat with the outdated commit 
/gost-MaineK00n-go-git-v5 # cd ~/.cache/gost/vuln-list-redhat
~/.cache/gost/vuln-list-redhat # apk add --no-cache git
~/.cache/gost/vuln-list-redhat # git reset --hard 2be42430931ed1fb7c0ef4af98b04e91a3bf05d5
~/.cache/gost/vuln-list-redhat # apk del git
~/.cache/gost/vuln-list-redhat # cd /gost-MaineK00n-go-git-v5/

// Second and subsequent fetches: pull ~/.cache/gost/vuln-list-redhat
/gost-MaineK00n-go-git-v5 # ./gost fetch redhat

// pull success: check ~/.cache/gost/vuln-list-redhat commit hash
/gost-MaineK00n-go-git-v5 # cd ~/.cache/gost/vuln-list-redhat
~/.cache/gost/vuln-list-redhat # apk add --no-cache git
~/.cache/gost/vuln-list-redhat # git log -n 2
commit 0df32a89999d74bba3834c952625fc2b2f6c7bc6 (HEAD -> main, origin/main, orig
in/HEAD)
Author: GitHub Action <action@github.com>
Date:   Wed Jun 12 19:19:36 2024 +0000

    Red Hat Security Data API

commit 2be42430931ed1fb7c0ef4af98b04e91a3bf05d5
Author: GitHub Action <action@github.com>
Date:   Wed Jun 12 18:08:04 2024 +0000

    Red Hat OVAL v2

Checklist:

You don't have to satisfy all of the following.

Is this ready for review?: YES

Reference