aboutsummaryrefslogtreecommitdiffstats
path: root/Library/Homebrew/dev-cmd/audit.rb
AgeCommit message (Collapse)Author
2017-04-10audit: don't recommend version aliases on --devel.Mike McQuaid
As requested in #11462 by @neutric as this produces confusing, incorrect output.
2017-04-05Merge pull request #2242 from GauthamGoli/audit_custom_copsMike McQuaid
Port audit_desc audit rules to a cop
2017-04-04audit: fix core formula alias check.Mike McQuaid
Was missing a formula object being passed.
2017-03-30Merge pull request #2399 from MikeMcQuaid/unversioned-formulae-checkMike McQuaid
audit: check for unversioned formulae.
2017-03-29audit: Fix cctools invocation check regular expression.William Woodruff
Additionally, ignore the cctools formula itself, since it obviously needs to check cctools invocations.
2017-03-28Merge pull request #1828 from woodruffw/audit-cctoolsWilliam Woodruff
audit: Check for invocations of cctools.
2017-03-26audit: bump whitelisted elm-format version to 0.6.0-alphailovezfs
2017-03-26audit: check for unversioned formulae.Mike McQuaid
If we're adding a versioned formulae we want to ensure that there's also an unversioned one too.
2017-03-26indentingRaza Hussain
2017-03-26changing if conditionRaza Hussain
2017-03-26simplify the regex and make a line max 80 char longRaza Hussain
2017-03-21Merge pull request #1732 from zmwangx/hint-migrationsMike McQuaid
Hint at new location of migrated formulae
2017-03-21Merge pull request #2365 from MikeMcQuaid/audit-provided-by-macosMike McQuaid
audit: check system dupe deps on new formulae.
2017-03-20blacklist: move to missing_formula class instead.Mike McQuaid
This will allow extending this class so it can be used by more than just blacklisting.
2017-03-19audit: deprecate depends_on :tex.Mike McQuaid
This has known issues with our `ghostscript` formula, we can't test it on CI and is a ludicrously heavy dependency that in many cases can be avoided by upstream providing prebuilt documentation.
2017-03-19audit: check system dupe deps on new formulae.Mike McQuaid
Provide a gentle nudge to users to check if these dependencies are definitely required.
2017-03-16audit: online - limit download time based on HTTPS determinationJCount
Previously, the http_content_headers_and_checksum method always downloaded the entire url, including headers. These downloads periodically hang, outputting false positives or wreaking havoc on the CI. Therefore, use curl's --max-time arg to prevent this by setting a hard limit of 600 seconds when the entire file is going to be used to detect whether the url can be changed to use the HTTPS protocol instead of HTTP. Otherwise, if the url already is HTTPS, limit the download time to 25 seconds since only the headers, not contents, matter.
2017-03-12Revert "audit: exempt wine's deps from the universal deprecation"ilovezfs
2017-03-11Add `Formatter::pluralize`.Markus Reiter
2017-03-08Merge pull request #2252 from zmwangx/audit-no-warn-brew-mirror-urlMike McQuaid
audit: do not warn about reachability of `brew mirror`ed URL
2017-03-05audit: freeze versioned_conflicts_whitelistJCount
2017-03-05audit: deconstruct versioned_conflicts_whitelist using splatJCount
2017-03-05audit: whitelist bash-completion@* to use conflicts_withJCount
this is necessary because they install conflicting scripts into HOMEBREW_PREFIX/etc/profile.d
2017-03-05Merge pull request #2262 from MikeMcQuaid/subversion-https-auditMike McQuaid
Don't check Subversion HTTPS pre-Sierra.
2017-03-05audit: whitelist node@* to use conflicts_withilovezfs
Add exceptions for node@* versioned formulae to use conflicts_with instead of keg_only :versioned_formula since they, and the main node formula, all currently overwrite npm during postinstall.
2017-03-05Don't check Subversion HTTPS pre-Sierra.Mike McQuaid
The system Subversion doesn't handle new certificate authorities (e.g. Let's Encrypt) well enough for this check to be useful.
2017-03-04audit: do not warn about reachability of `brew mirror`ed URLZhiming Wang
A `brew mirror`ed URL is usually not yet reachable at the time of pull request.
2017-03-02audit: reject versions starting with HEADJonathan Chang
Many parts of Homebrew assume that a version string beginning with "HEAD" is, in fact, a head build. A stable version that begins with "HEAD" violates this assumption and causes problems, as it's treated as a head build in some places and as a stable build in others.
2017-03-02Port audit_desc rules to copGautham Goli
2017-02-27audit: fix audit on formulae without homepagesMisty De Meo
2017-02-26xcodebuild audit: match xcodebuild with no argsMisty De Meo
Closes #2199. Signed-off-by: Misty De Meo <mistydemeo@gmail.com>
2017-02-25Merge pull request #2107 from MikeMcQuaid/audit-version-aliasesMike McQuaid
audit: check for version aliases.
2017-02-25audit: whitelist more unstable versions already in coreilovezfs
These were imported from homebrew/games.
2017-02-24audit: don't try to HTTP check non-HTTP content.Mike McQuaid
2017-02-24audit: use using for HTTPS detection.Mike McQuaid
2017-02-23audit: further refactor http content checks.Mike McQuaid
Check homepages and don’t check mirrors unless `—strict`.
2017-02-23audit: check for version aliases.Mike McQuaid
Current version aliases should be provided for versioned formulae so people can `brew install foo@1.2` to provide pin-like behaviour.
2017-02-23audit: handle redirects in get_content_details.Mike McQuaid
2017-02-23audit: refactor http content checks.Mike McQuaid
2017-02-22Revert "audit: fix revision should be removed."Mike McQuaid
2017-02-21Merge pull request #2086 from MikeMcQuaid/audit-revision-remove-fixilovezfs
audit: fix revision should be removed.
2017-02-21Revert "audit: check for version aliases."ilovezfs
2017-02-21audit: fix revision should be removed.Mike McQuaid
Regression introduced in #1754 which meant that (due to storing the current formula revision in `attributes_map`) `stable_revisions.empty?` would never be `true`.
2017-02-21audit: check for version aliases.Mike McQuaid
Current version aliases should be provided for versioned formulae so people can `brew install foo@1.2` to provide pin-like behaviour.
2017-02-20audit: fix `brew style`.Mike McQuaid
2017-02-20Merged 404 and security mirror auditing logicDavid Broder-Rodgers
2017-02-20Prevent mirror curl for file:/// URLDavid Broder-Rodgers
2017-02-20Use DownloadStrategyDetector to classify mirror URLsDavid Broder-Rodgers
2017-02-20Added better check for HTTP git URLsDavid Broder-Rodgers
2017-02-20Updated HTTP mirror check to use new url_status_code methodDavid Broder-Rodgers