Pkgcheck

Latest version: v0.10.29

Safety actively analyzes 628969 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 7 of 13

0.9.1

---------------------------

- Support newline-separated values for lists in addition to comma-separated in
pkgcheck configs.

- pkgcheck scan: Bundle and load a config defining a GentooCI checkset matching
Gentoo CI error keywords.

- pkgcheck scan: Add --staged support for targeting staged git changes to
generate restrictions.

- pkgcheck: Suppress pkgcore-specific help options that should generally be
avoided by users but is required internally.

---------------------------

0.9.0

---------------------------

- pkgcheck ci: Add initial subcommand for CI-specific usage (e.g. used by
pkgcheck-action).

- EclassCheck: force bash error output to use the C locale.

- Officially export Result class in addition to all specific result
keywords/classes for API usage which can be useful for type
hinting purposes.

- pkgcheck scan: Respect version-level scan scope targets (293).

- pkgcheck scan: Allow additive args for --exit. This allows adding
keywords to the default set (via '+Keyword') that trigger exit
failures without having to explicitly specify the 'error' set as
well.

- PackageUpdatesCheck: Use search repo to find old packages to fix
checking for OldPackageUpdate results in overlays.

- Make 'NonsolvableDeps' a scannable keyword alias.

- Drop metadata.xml indentation and empty element results from
warning to style level.

- Drop BadDescription and RedundantLongDescription result levels
from warning to style.

- Restrict UnknownCategoryDirs result to the gentoo repo.

- Apply target repo base profile masks across all scan profiles
(281).

- Drop pickle-based reporter support -- use the scan API call to
create and access result objects.

- pkgcheck replay: Drop pickle stream support, use JSON support
instead from the JsonStream reporter.

---------------------------

0.8.2

---------------------------

- Generate checkrunners per target restriction (279).

- Fix result object re-creation issues (276).

---------------------------

0.8.1

---------------------------

- Include tree-sitter-bash files in dist tarball.

---------------------------

0.8.0

---------------------------

- Add Style priority level for keywords that's between Warning and Info levels.

- EclassDocMissingVar: Ignore underscore-prefixed vars as it's assumed these are
internal only.

- pkgcheck scan: Add support for profiles path target restrictions. Now
``pkgcheck scan`` can be pointed at dir and file targets inside the profiles
directory and relevant checks will be run against them. Note that dir targets
will run checks against all path descendents.

- pkgcheck scan: Add support for incremental profile scanning. This means all
profile changes will get run against relevant checks when using ``pkgcheck
scan --commits``.

- GentooRepoCheck: Allow specifically selected checks to override skip (261).

- pkgcheck scan: Add support to forcibly disable all pkg filters via passing
'false', 'no', or 'n'. This provides the ability to disable any filters that
would otherwise be enabled by default.

- pkgcheck scan: Support checkset and check args for the --exit option.

- Use arches from profiles.desc instead of pulling them from make.defaults
(237).

- pkgcheck scan: Enable profile checks when using ``pkgcheck scan --commits``
if profile changes are detected.

- DependencyCheck: Split outdated blocker checks into OutdatedBlockersCheck
since required addons are now strictly enforced for cache addons.

- pkgcheck scan: Staged changes are now ignored when using ``pkgcheck scan
--commits``. Note that due to how ``git stash`` works, they'll be unstaged
on scan completion.

- NonsolvableDepsInExp: Switch from warning level to error level to match other
visibility results.

- VirtualKeywordsUpdate: Replace MissingVirtualKeywords with result that flags
virtuals with keywords that could be added.

- Add basic API for running package scans (52).

- pkgcheck scan: Drop 'repo' -f/--filter filter type since it's underused and
doesn't mesh well with the new, granular filtering support.

- BadCommitSummary: Escape regex strings in package names (256).

- pkgcheck scan: Add support for targeted --filter options that can be enabled
per keyword, check, or checkset.

- pkgcheck scan: Re-add support for -C/--checksets option that must be defined
in the CHECKSETS config section. Also, move 'all' and 'net' aliases from
-c/--checks to virtual checksets.

- MisplacedEclassVar: Add support for flagging misplaced PRE_INHERIT eclass
variables in ebuilds.

- Network requests now use streamed GET requests instead of HEAD with fallback
to avoid various webservers not supporting HEAD requests.

- MissingMove: Properly ignore git ebuild file renames.

- pkgcheck cache: Add initial -r/--repo option support (251).

- Force using the fork start method for multiprocessing (254).

- pkgcheck scan: Prefer path restrictions during restriction generation if the
targets are in the target repo.

- UnusedGlobalUseExpand: Check for unused global USE_EXPAND variables.

- Drop support for python-3.6 and python-3.7.

---------------------------

0.7.9

---------------------------

- GitCommitsCheck: Fix package vs category level summary checks.

---------------------------

Page 7 of 13

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.