Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Handling of outdated build dependencies #71

Open
Feliix42 opened this issue Oct 23, 2020 · 0 comments
Open

Handling of outdated build dependencies #71

Feliix42 opened this issue Oct 23, 2020 · 0 comments
Labels
enhancement New feature or request general-discussion General discussion issues

Comments

@Feliix42
Copy link
Member

What should happen to outdated build dependencies? Should they be excluded from the badge?
@Enet4 correctly noted that issues with the build-time dependencies could in the worst case lead to secret credentials being leaked during the CI/CD workflow, so they may be relevant to some people.

As @robjtede suggested, we could make the inclusion of build dependencies in the badge opt-in, but the question would be how. You could use a GET parameter in the URL to enable/disable this but that would require some explanation from our end and may not be very intuitive to use. Example for this:

https://deps.rs/repo/github/deps-rs/deps.rs?build_deps=false

What do you guys think? How could a good solution work?

@Feliix42 Feliix42 added enhancement New feature or request general-discussion General discussion issues labels Oct 23, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request general-discussion General discussion issues
Projects
None yet
Development

No branches or pull requests

1 participant