osv-scanner icon indicating copy to clipboard operation
osv-scanner copied to clipboard

User informed when new version available

Open hayleycd opened this issue 2 years ago • 3 comments

Would it be possible for the user to be notified that a newer version is available when they run the scanner?

I ran 1.1 this morning before upgrading to 1.2. I knew 1.2 had just been released, but I was thinking it would have been nice to see a line outputted (potentially in color to stand out) that informed me of the available upgrade.

hayleycd avatar Feb 23 '23 18:02 hayleycd

Hmm, this is indeed nice but I'm not sure how this would fit into user workflows, given that there are multiple distribution channels.

i.e. if I'm a Linux user pulling this in via my package manager, and there's a new upstream version available via GitHub, it may not be available in the package manager.

oliverchang avatar Mar 01 '23 01:03 oliverchang

This issue has not had any activity for 60 days and will be automatically closed in two weeks

github-actions[bot] avatar Jul 23 '24 18:07 github-actions[bot]

This piqued my interest as something to explore contributing.

  • https://xnacly.me/posts/2023/go-metadata/
  • https://cloud.google.com/blog/topics/threat-intelligence/golang-internals-symbol-recovery/

My thought was if the binary could introspect itself to conditionalise the behaviour to only running when it is confident it's been compiled locally from source, as opposed to packaged by a Linux distribution, this would be of greatest benefit to its user...

andrewpollock avatar Jul 26 '24 04:07 andrewpollock