Pkgcheck

Latest version: v0.10.29

Safety actively analyzes 628989 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 8 of 13

0.7.8

---------------------------

- pkgcheck show: Add ``-C/--caches`` support.

- BadCommitSummary: Support flagging bad category level commit
summaries (250).

- FormatReporter: Raise exception for unhandled integer key args.

- Treat git rename operations as addition and removal for package
changes (249).

- PerlCheck is now an optional check that isn't run by default
since most users won't have the required dependency installed.

- Allow additive -c/--checks args that add checks to the default
set to run. For example, use ``pkgcheck scan -c=+PerlCheck`` to
run PerlCheck in addition to the default checks.

- InvalidManifest: Flag ebuilds with invalid Manifest files.

- pkgcheck scan: Support eclass file target restrictions.

- MissingMove: Flag packages on local commits that are renamed with
no corresponding move package update.

- MissingSlotmove: Flag packages on local commits with changed SLOT
with no corresponding slotmove package update.

- MaintainerNeeded: Flag packages with invalid maintainer-needed
comments (239).

- pkgcheck scan: Display cache update progress by default.

- LiveOnlyPackage: Flag ebuilds that only have VCS-based versions.

- pkgcheck scan: Support a configurable exit status via ``--exit``
(28).

- pkgcheck scan: Drop --sorted option that isn't useful enough to
keep around due to check parallelization.

- MatchingChksums: Ignore go.mod related false positives (228).

- EclassDocMissingFunc: Flag eclasses missing docs for an exported
function.

- EclassDocMissingVar: Flag eclasses missing docs for an exported
variable.

- InternalEclassFunc: Flag ebuilds using internal functions from an
eclass.

- IndirectInherits: Flag ebuilds using functions from an indirectly
inherited eclass.

- MissingInherits: Flag ebuilds with missing eclass inherits.

- UnusedInherits: Flag ebuilds with unused eclass inherits.

- PythonCompatUpdate: Flag ebuilds with PYTHON_COMPAT that can be
updated to support newer python versions.

- Dump all pickled caches atomically (244).

- UnsupportedEclassEapi: Flag ebuilds that inherit an eclass with
outdated SUPPORTED_EAPIS.

- EclassDocError: Flag eclasses that fail eclass doc tag parsing.

- RedundantPackageUpdate: Flag package update entries that have the
same source and destination.

- ProfileAddon: Only enable exp profiles for explicitly selected
keywords and not when keywords are selected by default.

- pkgcheck scan: Don't load system/user configs when explicitly
disabled via ``--config no``.

---------------------------

0.7.7

---------------------------

- Avoid trying to match old packages against current repo for git support (215).

- Rename DeprecatedPkg result keyword to DeprecatedDep and try to disambiguate its output
message (218).

- FormatReporter: Use an empty string for unmatched variables (211) and add the result output
name to the available attributes.

- DroppedKeywordsCheck: Disregard non-VCS pkgs without KEYWORDS (224).

- Ignore license and keyword settings from system config for StableRequest results (229).

- pkgcheck scan: Support output name arguments for -k/--keywords (221).

- StableArchesAddon: Use known stable arches from arches.desc (GLEP 72) if available (230).

- pkgcheck scan: Fully support custom user config files via --config.

- ProfilesAddon: Automatically enable experimental profiles for selected arches that only have
experimental profiles (222) and selected keywords that require them (225).

- VisibilityCheck: Sort failed package atoms for NonsolvableDep results (223).

- Filter package atoms from path list when scanning git commits (217).

- Use a ``git stash`` context manager when scanning commits so untracked files or uncommitted
changes are ignored.

- Only add eclass directory when scanning git commits if it exists in the target repo (231).

---------------------------

0.7.6

---------------------------

- VariableInHomepage: Include parameter expansion chars in flagged variable and
drop flagging for unbracketed variables until bash parsing support exists.

- Drop PythonSingleUseMismatch result since python-single-r1.eclass will no
longer generate PYTHON_TARGETS.

- FetchablesUrlCheck: Disable package feed filtering so all defined SRC_URI
URLs are scanned by default.

- Output create/update git repo cache message to stderr by default to help tell
the user what's happening during possibly long scan delays.

- Add config file support at /etc/pkgcheck/pkgcheck.conf,
~/.config/pkgcheck/pkgcheck.conf, and metadata/pkgcheck.conf for system-wide,
user, and repo-specific default settings respectively. Any settings found in
those config files will be overridden by matching command line arguments.
Almost all command line arguments can be set in config files, see the man
page or online docs for config examples.

- For network checks, add fallback to GET requests if HEAD requests fail with
501 or 405 HTTP errors (208).

---------------------------

0.7.5

---------------------------

- RedundantLongDescription: Flag redundant longdescription metadata.xml
elements (205).

- RedundantDodir: Flag redundant dodir usage (169).

- pkgcheck scan: Add special argument 'net' for -c/--checks option that enables
all network checks. This allows for easily running all network checks using
something similar to ``pkgcheck scan --net -c net``.

- AbsoluteSymlink: Flag dosym calls using paths starting with ${EPREFIX}.

- DeprecatedInsinto: Flag deprecated insinto usage with unnecessary quote usage.

- pkgcheck scan: Show a traceback and forcibly exit on unexpected exceptions
when running checks.

- EclassBashSyntaxError: Report bash syntax errors in eclasses.

- pkgcheck scan: Allow location specific scopes to override target path
restrict scope. This makes scanning against a file path target like
${REPO_PATH}/eclass only enable eclass checks instead of doing a full repo
scan.

- pkgcheck scan: Allow path target args of '.' or '..' to work as expected.

- RdependChange: Flag non-live, locally committed packages with altered RDEPEND
lacking revbumps.

- ``pkgcheck scan --commits`` now enables eclass checks if it notices any
relevant eclass changes in the local repo.

- EclassHeaderCheck: Add initial eclass header checks similar to the ones done
against ebuilds in the gentoo repo.

- pkgcheck scan: Drop the -C/--checkset option, it might return in some form
once reworked config file support is done.

- MetadataUrlCheck: Add initial check for metadata.xml URL validity (167).

- Ignore unstaged changes when generating targets for ``pkgcheck scan
--commits``.

- RedundantUriRename: Flag redundant SRC_URI renames (196).

---------------------------

0.7.4

---------------------------

- BinaryFile: Ignore some classes of false positives that use multiple
encodings.

- Output repo and commit related results after any package related results
found during scanning if using a relevant scan scope level.

- Sort git commit-related results by name or description for multiple results
against a single commit.

- BadCommitSummary: Convert to commit result instead of package result since it
directly relates to the commit made more than the package itself.

- Add optional ref argument support for --commits option. This allows passing a
commit or reference to diff the current tree against in order to determine
scanning targets.

- GitPkgCommitsCheck: Flag all incorrect copyright dates instead of just
outdated ones.

- GitCommitsCheck: Use a single ``git cat-file`` process for verifying all
Fixes/Reverts tags instead of one per commit.

- InvalidCommitMessage: Check for empty lines between summary, body, and tags.

---------------------------

0.7.3

---------------------------

- Flag git tags and commit messages that don't follow specifications described
in GLEP 66 (186) via InvalidCommitTag and InvalidCommitMessage results.

- Skip reporting blocker dependencies marked as deprecated.

---------------------------

Page 8 of 13

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.