mirrors/pkg-proxy
Watch
1
0
Fork
You've already forked pkg-proxy
 1
mirror of https://github.com/git-pkgs/proxy.git synced 2026-11-09 07:39:19 -05:00
Code Issues Releases Packages Wiki Activity
pkg-proxy/internal/denylist
History
Exact
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Simon Chrzanowski a288afab32 Match denylist entries for distro packages as handlers name them 
The denylist kept the PURL namespace, but the Debian and RPM handlers
build pkg:deb/{name} and pkg:rpm/{name} without a vendor, while Alpine
and Arch build pkg:apk/alpine/{name} and pkg:alpm/arch/{name} with one.
So standard entries such as pkg:deb/debian/curl@... or
pkg:rpm/fedora/curl@..., and pkg:apk/busybox@... or pkg:alpm/glibc@...,
never matched. Drop the namespace of distro types on both sides, as
retention and the inventory already do, using packageurl's list of
those types.

Debian and RPM handlers read versions from filenames, which leave out
the epoch, so an entry such as pkg:deb/foo@1:2.3-1 never matched
foo_2.3-1_amd64.deb. An entry with an epoch now also covers the
version without it.
2026-11-08 08:04:09 +01:00
..
denylist.go Match denylist entries for distro packages as handlers name them 2026-11-08 08:04:09 +01:00
denylist_test.go Match denylist entries for distro packages as handlers name them 2026-11-08 08:04:09 +01:00