Comments (1)
We won't refactor our calls to external tools (e.g. jb
) to address B607. Doing so would mean that we need to use fully qualified paths for all external dependencies, which would make our users' lives much harder since they'd have to put external dependencies into an exact location, or we'd have to introduce additional config options to specify full paths for all external dependencies.
For B603, I don't see where we even actually provide untrusted input to subprocess.call()
, so we'll just keep that check disabled as well.
from commodore.
Related Issues (20)
- Sign commits with GPG in Docker image HOT 3
- --local is not useful if new components are added to the catalog HOT 1
- Catalog compile quietly overwrites local changes HOT 1
- Sort the output of 'commodore catalog list' HOT 1
- Refactor classes `Component` and `Package` to have a shared base class
- Add option to filter dependency list for `component sync` and `package sync`
- Improve handling of secondary rate-limits in `sync_dependencies()` HOT 3
- Support rendering preview of template changes in a feature branch for `component update` / `package update`
- `commodore component update` commits files in gitignore HOT 1
- kube-libsonnet is using soon deprecated API versions HOT 4
- Commodore's template sync creates PRs even if there's no actual changes
- YAML generated by Commodore postprocess filters uses non-standard formatting
- `commodore inventory lint` crashes on YAML documents which contain top-level `parameters` key which isn't a dict
- Report template changes in sync PRs
- Add support for explicit component dependencies
- Make Poetry version in Dockerfile renovatable
- Required dependency libmagic not present on macOS HOT 2
- Compilation fails when using an empty string as key HOT 2
- Support arbitrary default branch names for cluster catalog and dependency repositories
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from commodore.