commit | 69fcc695ab6cabb4e4ae598386de524cfb8bb8ad | [log] [tgz] |
---|---|---|
author | Marc-Antoine Ruel <maruel@google.com> | Fri Sep 08 15:03:12 2023 +0000 |
committer | CQ Bot <fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com> | Fri Sep 08 15:03:12 2023 +0000 |
tree | 875db4a81dfbf19cc609dd9320e87c5e17871f3b | |
parent | 40d47c51319086c38326bd6dba6f7082c6cde779 [diff] |
[engine] Add support for vendor_path Confirmed that the digest is enforced for vendored packages. While the version is required, it is effectively ignored. Change-Id: I96df2b906920d6d0bd681d2c1b1ef36a66bdefb5 Reviewed-on: https://fuchsia-review.googlesource.com/c/shac-project/shac/+/912874 Reviewed-by: Oliver Newman <olivernewman@google.com> Fuchsia-Auto-Submit: Marc-Antoine Ruel <maruel@google.com> Commit-Queue: Auto-Submit <auto-submit@fuchsia-infra.iam.gserviceaccount.com>
Shac (Scalable Hermetic Analysis and Checks) is a unified and ergonomic tool and framework for writing and running static analysis checks.
Shac checks are written in Starlark.
go install go.fuchsia.dev/shac-project/shac@latest shac check shac doc shac.star | less
Planned features/changes, in descending order by priority:
shac.textproto
shac.star
files.shac
cache directory that checks can write toctx.scm
glob
arguments to ctx.scm.{all,affected}_files()
functions for easier filtering⚠ The source of truth is at https://fuchsia.googlesource.com/shac-project/shac.git and uses Gerrit for code review.
See CONTRIBUTING.md to submit changes.