Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add ability to scan a Git repo given its url #14

Closed
bradlarsen opened this issue Dec 16, 2022 · 0 comments · Fixed by #27
Closed

Add ability to scan a Git repo given its url #14

bradlarsen opened this issue Dec 16, 2022 · 0 comments · Fixed by #27
Assignees
@bradlarsen
Labels
enhancement New feature or request

Comments

@bradlarsen
Copy link
Collaborator

Something like scan -d DATASTORE --git-url https://github.com/python/cpython should work. This would automatically clone the requested repo and then scan it.

A new clones subdirectory within the datastore can be used for storing automatically cloned repos.

An automatically cloned repo should be cloned using the --mirror option, which pulls down additional objects compared to a regular git clone invocation.

If a Git URL is requested that was already automatically cloned, the existing clone state should be reused and updated if possible.
@bradlarsen bradlarsen added the enhancement New feature or request label Dec 16, 2022
@bradlarsen bradlarsen self-assigned this Dec 30, 2022
@bradlarsen bradlarsen mentioned this issue Feb 15, 2023
Merged
bradlarsen added a commit that referenced this issue Feb 17, 2023
@bradlarsen
Add ability to scan Git repo URLs and GitHub users/orgs (#27)
8bde84e 
* `scan` now supports a new `--git-url URL` option, allowing a Git repository
  to be scanned without manually cloning it. Fixes #8 and #14.
* `scan` now supports GitHub enumeration, allowing the repositories
  of a GitHub user or organization to be scanned in bulk
* Dockerfile now uses release profile instead of dev profile, and uses the `--locked` option
* The `reqwest` dependency now uses its `native-tls-vendored` feature
  to avoid a runtime dependency on openssl on linux
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@bradlarsen bradlarsen

Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Add ability to scan Git repo URLs and GitHub users/orgs praetorian-inc/noseyparker
1 participant
@bradlarsen