From fa964f9940ef3d6154109526365d97484f7f8828 Mon Sep 17 00:00:00 2001 From: andrew <1060+andrew@users.noreply.github.com> Date: Mon, 27 Jul 2026 12:10:15 +0000 Subject: [PATCH] Update command reference from v0.18.2 --- content/docs/reference/git-pkgs_deprecated.md | 6 +-- content/docs/reference/git-pkgs_licenses.md | 1 + content/docs/reference/git-pkgs_provenance.md | 38 ++++++++++++++++ content/docs/reference/git-pkgs_replace.md | 45 +++++++++++++++++++ 4 files changed, 87 insertions(+), 3 deletions(-) create mode 100644 content/docs/reference/git-pkgs_provenance.md create mode 100644 content/docs/reference/git-pkgs_replace.md diff --git a/content/docs/reference/git-pkgs_deprecated.md b/content/docs/reference/git-pkgs_deprecated.md index 63644de..6d00143 100644 --- a/content/docs/reference/git-pkgs_deprecated.md +++ b/content/docs/reference/git-pkgs_deprecated.md @@ -1,12 +1,12 @@ --- title: "git-pkgs deprecated" -description: "Find deprecated dependency versions" +description: "Find deprecated or withdrawn dependency versions" weight: 10 --- -Find deprecated dependency versions +Find deprecated or withdrawn dependency versions -Check installed dependency versions against registries and report deprecated versions. +Check installed dependency versions against registries and report deprecated, yanked, or retracted versions. ``` git-pkgs deprecated [flags] diff --git a/content/docs/reference/git-pkgs_licenses.md b/content/docs/reference/git-pkgs_licenses.md index 296a3a4..05b8d52 100644 --- a/content/docs/reference/git-pkgs_licenses.md +++ b/content/docs/reference/git-pkgs_licenses.md @@ -26,6 +26,7 @@ git-pkgs licenses [flags] -f, --format string Output format: text, json, csv (default "text") --group Group output by license -h, --help help for licenses + --offline Use cached metadata without making network requests --permissive Flag non-permissive licenses --unknown Flag packages with unknown licenses ``` diff --git a/content/docs/reference/git-pkgs_provenance.md b/content/docs/reference/git-pkgs_provenance.md new file mode 100644 index 0000000..79fb927 --- /dev/null +++ b/content/docs/reference/git-pkgs_provenance.md @@ -0,0 +1,38 @@ +--- +title: "git-pkgs provenance" +description: "Check dependency provenance metadata" +weight: 10 +--- + +Check dependency provenance metadata + +Check resolved dependencies for registry provenance and attestation metadata. + +The command reports verified trusted-publishing signals where registry APIs +expose them, registry attestations and signatures as weaker integrity signals, +and unsupported ecosystems explicitly instead of treating missing metadata as +verified. + +``` +git-pkgs provenance [flags] +``` + +### Options + +``` + -b, --branch string Branch to query (default: current branch) + -c, --commit string Check dependencies at specific commit (default: HEAD) + -e, --ecosystem string Filter by ecosystem + -f, --format string Output format: text, json (default "text") + -h, --help help for provenance + --missing Only show dependencies without trusted-publishing provenance +``` + +### Options inherited from parent commands + +``` + --color string When to colorize output: auto, always, never (default "auto") + --include-submodules Include git submodules when scanning for manifests + -p, --pager Use pager for output + -q, --quiet Suppress non-essential output +``` diff --git a/content/docs/reference/git-pkgs_replace.md b/content/docs/reference/git-pkgs_replace.md new file mode 100644 index 0000000..56bea13 --- /dev/null +++ b/content/docs/reference/git-pkgs_replace.md @@ -0,0 +1,45 @@ +--- +title: "git-pkgs replace" +description: "Redirect a dependency to a local path, git ref, or version" +weight: 10 +--- + +Redirect a dependency to a local path, git ref, or version + +Redirect a dependency to an alternative source for downstream testing. +Use --path for a local checkout, --git with an optional --ref for a git source, +or pass a version to fall through to the package manager's add operation. + +Examples: + git-pkgs replace github.com/acme/lib --path ../lib + git-pkgs replace lodash --git https://github.com/fork/lodash --ref fix-branch + git-pkgs replace lodash 4.17.21 + git-pkgs replace github.com/acme/lib --drop + +``` +git-pkgs replace [version] [flags] +``` + +### Options + +``` + --drop Remove an existing replacement + --dry-run Show what would be run or edited without executing + -e, --ecosystem string Filter to specific ecosystem + -x, --extra stringArray Extra arguments to pass to package manager + --git string Redirect dependency to a git repository + -h, --help help for replace + -m, --manager string Override detected package manager (takes precedence over -e) + --path string Redirect dependency to a local path + --ref string Git branch, tag, or revision for --git + -t, --timeout duration Timeout for replace operation (default 5m0s) +``` + +### Options inherited from parent commands + +``` + --color string When to colorize output: auto, always, never (default "auto") + --include-submodules Include git submodules when scanning for manifests + -p, --pager Use pager for output + -q, --quiet Suppress non-essential output +```