https://github.com/kpcyrd/updlockfiles

Manage lockfiles in PKGBUILDs for upstreams that don't ship them, `updpkgsums` for dependency trees (Arch Linux tooling)
https://github.com/kpcyrd/updlockfiles

archlinux reproducible-builds supply-chain-security

Last synced: about 1 month ago
JSON representation

Manage lockfiles in PKGBUILDs for upstreams that don't ship them, `updpkgsums` for dependency trees (Arch Linux tooling)

• Host: GitHub
• URL: https://github.com/kpcyrd/updlockfiles
• Owner: kpcyrd
• License: gpl-3.0
• Created: 2022-10-16T18:29:36.000Z (about 2 years ago)
• Default Branch: main
• Last Pushed: 2024-07-03T21:47:39.000Z (6 months ago)
• Last Synced: 2024-11-01T04:28:48.547Z (about 2 months ago)
• Topics: archlinux, reproducible-builds, supply-chain-security
• Language: Rust
• Homepage:
• Size: 40 KB
• Stars: 11
• Watchers: 4
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Funding: .github/FUNDING.yml
  • License: LICENSE

Awesome Lists containing this project

README

        
# updlockfiles

Manage lockfiles for packages that don't ship any upstream. Like `updpkgsums`

but for 3rd party dependency trees.

If you're not actively maintaining Arch Linux packages you likely don't need

this tool.

## Getting started

Add a function like this to your PKGBUILD:

```sh

updlockfiles() {

  cd ${pkgname}

  rm -f composer.lock

  composer update

  cp composer.lock "${outdir}/"

}

```

This works for arbitrary files, just make sure the files you want copied back

need to be copied into `$outdir`.

Next run this command (no arguments needed, the default should _just work_):

```

updlockfiles

```

Finally add the new file to your source array (and make sure it's part of your next commit!):

```

source=("git+https://github.com/vimeo/psalm.git#commit=${_commit}"

        "composer.lock")

```

Update the checksums for content pinning:

```

updpkgsums

```

## Update a lockfile

If the initial setup was done before you can generate a new lockfile of the latest patch level like this:

```

updlockfiles

```

## License

GPLv3+