Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions content/docs/reference/git-pkgs_deprecated.md
Original file line number Diff line number Diff line change
@@ -1,12 +1,12 @@
---
title: "git-pkgs deprecated"
description: "Find deprecated dependency versions"
description: "Find deprecated or withdrawn dependency versions"
weight: 10
---

Find deprecated dependency versions
Find deprecated or withdrawn dependency versions

Check installed dependency versions against registries and report deprecated versions.
Check installed dependency versions against registries and report deprecated, yanked, or retracted versions.

```
git-pkgs deprecated [flags]
Expand Down
1 change: 1 addition & 0 deletions content/docs/reference/git-pkgs_licenses.md
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,7 @@ git-pkgs licenses [flags]
-f, --format string Output format: text, json, csv (default "text")
--group Group output by license
-h, --help help for licenses
--offline Use cached metadata without making network requests
--permissive Flag non-permissive licenses
--unknown Flag packages with unknown licenses
```
Expand Down
38 changes: 38 additions & 0 deletions content/docs/reference/git-pkgs_provenance.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,38 @@
---
title: "git-pkgs provenance"
description: "Check dependency provenance metadata"
weight: 10
---

Check dependency provenance metadata

Check resolved dependencies for registry provenance and attestation metadata.

The command reports verified trusted-publishing signals where registry APIs
expose them, registry attestations and signatures as weaker integrity signals,
and unsupported ecosystems explicitly instead of treating missing metadata as
verified.

```
git-pkgs provenance [flags]
```

### Options

```
-b, --branch string Branch to query (default: current branch)
-c, --commit string Check dependencies at specific commit (default: HEAD)
-e, --ecosystem string Filter by ecosystem
-f, --format string Output format: text, json (default "text")
-h, --help help for provenance
--missing Only show dependencies without trusted-publishing provenance
```

### Options inherited from parent commands

```
--color string When to colorize output: auto, always, never (default "auto")
--include-submodules Include git submodules when scanning for manifests
-p, --pager Use pager for output
-q, --quiet Suppress non-essential output
```
45 changes: 45 additions & 0 deletions content/docs/reference/git-pkgs_replace.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,45 @@
---
title: "git-pkgs replace"
description: "Redirect a dependency to a local path, git ref, or version"
weight: 10
---

Redirect a dependency to a local path, git ref, or version

Redirect a dependency to an alternative source for downstream testing.
Use --path for a local checkout, --git with an optional --ref for a git source,
or pass a version to fall through to the package manager's add operation.

Examples:
git-pkgs replace github.com/acme/lib --path ../lib
git-pkgs replace lodash --git https://github.com/fork/lodash --ref fix-branch
git-pkgs replace lodash 4.17.21
git-pkgs replace github.com/acme/lib --drop

```
git-pkgs replace <package> [version] [flags]
```

### Options

```
--drop Remove an existing replacement
--dry-run Show what would be run or edited without executing
-e, --ecosystem string Filter to specific ecosystem
-x, --extra stringArray Extra arguments to pass to package manager
--git string Redirect dependency to a git repository
-h, --help help for replace
-m, --manager string Override detected package manager (takes precedence over -e)
--path string Redirect dependency to a local path
--ref string Git branch, tag, or revision for --git
-t, --timeout duration Timeout for replace operation (default 5m0s)
```

### Options inherited from parent commands

```
--color string When to colorize output: auto, always, never (default "auto")
--include-submodules Include git submodules when scanning for manifests
-p, --pager Use pager for output
-q, --quiet Suppress non-essential output
```