Support

• S

  GET Request "lt" operator not working for a string in ProGet v2024.16
  21 Nov 2024, 14:20 • sneh.patel_0294   23 Nov 2024, 05:11

  4
  0
  Votes
  4
  Posts
  16
  Views

  23 Nov 2024, 05:11

  Hi @sneh-patel_0294 , Here is the NuGet API Documentation: https://learn.microsoft.com/en-us/nuget/api/overview Here is the Packages API query you would want: https://docs.inedo.com/docs/proget/reference-api/proget-api-packages/proget-api-packages-list-versions#http-response-specification Regardless of what APi you use, you'll need to change your query strategy: Get a list of all versions of CPS.Regression from the server From that list, filter by 9.1 and then sort by latest that's not prerelease There are some sample scripts that might be helpful on our docs as well: https://docs.inedo.com/docs/proget/reference-api/proget-api-packages/proget-api-packages-list-versions#list-all-non-prerelease-versions-powershell Thanks, Alana
• S

  pgutil exclude test and build projects
  21 Nov 2024, 10:33 • sebastien.gamby_3349   22 Nov 2024, 12:25

  2
  0
  Votes
  2
  Posts
  8
  Views

  22 Nov 2024, 12:25

  Hi @sebastien-gamby_3349, I don't see an option to do anything like that, but we're happy to brainstorm/think of an option to add. The main issue is documentation and avoiding having 1000 options. I see that there's a ---do-not-scan-node_modules switch; maybe that could be converted to a --excludePaths={relativePathCsv} or something? So ---do-not-scan-node_modules would become --excludePaths=node_modules and you could do --excludePaths="myproj1.csproj,myproj2.csproj" or something? Just brainstorming here, not sure if that's even feasible. Here is the current documentation for the command Description: Generates a minimal SBOM from project dependencies and uploads it to ProGet Usage: pgutil builds scan [options] Options: --input=<input> (REQUIRED) Project to scan for dependencies --project-name=<project-name> (REQUIRED) Name of the component consuming the dependencies --version=<version> (REQUIRED) Version of the component consuming the dependencies --api-key=<api-key> ProGet API key used to authorize access --do-not-scan-node_modules Do not scan the node_modules directory when scanning for package-lock.json files --include-dev-dependencies Include npm development dependencies from the package-lock.json file in the generated SBOM document --include-project-references Include dependencies from referenced projects in the generated SBOM document --password=<password> ProGet user password used to authorize access --project-type=<project-type> Type of the consuming project (default=library) --scanner-type=<scanner-type> Type of project scanner to use; auto, npm, NuGet, PyPI, or Conda (default=auto) --source=<source> Named source or URL of ProGet --username=<username> ProGet user name used to authorize access -?, --help Show help and usage information Examples: $> pgutil builds scan --input=WebDataTool.csproj --project-name="Web Data Tool" --version=1.2.3 ``
• G

  MFA on Integrated Auth
  22 Nov 2024, 07:00 • george_4088   22 Nov 2024, 12:18

  4
  0
  Votes
  4
  Posts
  9
  Views

  22 Nov 2024, 12:18

  Hi @george_4088, That is correct, but a brute-force attack wouldn't succeed unless an administrator used something silly like admin for their username and password for their password. You could just as easily integrate with an LDAP/Active Directory server, which will add timeouts and account lockouts to make it impossible to "crack" in our lifetime. SAML is fine too. My point is that it's like 1000 times more likely that the API Key used to publish those Chocolatey packages would be exposed in logs, configuration files, etc. That's the attack surface you want to be careful of. Cheers, Alana
• C

  pgutil: PackageLockOnly for npm projects
  10 Oct 2024, 11:14 • caterina   20 Nov 2024, 17:13

  7
  0
  Votes
  7
  Posts
  23
  Views

  20 Nov 2024, 17:13

  Hi @caterina, No problem, thanks for getting back to us. We have an upcoming release of pgutil that will include this flag. We also have improved this command a bit by allowing you to use the working directory which will search for the right files instead of --input having to specify the path to the file (although you still can). It will now also automatically audit the scan directly after, you can use --noaudit to skip the audit. We should have those updates pushed this week. Thanks, Rich
• F

  Debian package replication based on hash values
  15 Nov 2024, 18:36 • frei_zs   19 Nov 2024, 11:08

  3
  0
  Votes
  3
  Posts
  10
  Views

  F 19 Nov 2024, 11:08

  Hey Alana, thank you very much. Maybe this is some issue with our setup then. I will further check and investigate on our side first. :) Best, Frank
• P

  How to configure raft git in Otter
  otter • 17 Nov 2024, 11:16 • philippe.camelio_3885   18 Nov 2024, 07:46

  3
  0
  Votes
  3
  Posts
  3
  Views

  P 18 Nov 2024, 07:46

  Hello @atripp Oups ! I made a mistake, I used master instead of main for the branch. It is working fine Sorry for this Best regards PhilippeC.
• C

  ProGet: Different behavior for build creation
  15 Oct 2024, 13:59 • caterina   13 Nov 2024, 11:25

  9
  0
  Votes
  9
  Posts
  28
  Views

  13 Nov 2024, 11:25

  Hi @caterina , This will be fixed in the next maintenance release via PG-2829. I just checked in the change. I made a mistake when making the original change, and used the ProjectBuildId instead of the ProjectId when validating the if other builds exists. So it works if the Ids match perfectly (like when I tested it). Note this only impacts the UI, and we don't really expect users to create builds via the UI. Thanks, Alana
• R

  Vulnerability JQuery Proget 5.2.14
  6 Nov 2024, 09:15 • r.vanmeurs_4680   12 Nov 2024, 07:01

  3
  0
  Votes
  3
  Posts
  9
  Views

  R 12 Nov 2024, 07:01

  Thanks for answering me, clear !
• J

  Terraform private registry
  8 Jul 2022, 22:23 • jeff.miles_5073   9 Nov 2024, 02:55

  6
  3
  Votes
  6
  Posts
  52
  Views

  9 Nov 2024, 02:55

  Hi @kichikawa_2913 @jeff-miles_5073 @martin-helgesen_8100 , Good news! We've got a Terraform Feed working on version 2024.20-rc.4 and it seems ready for release: I'd love to get a second set of eyes on our approach and the docs; this was a really interesting protocol/API to work with because there are no "Terraform Packages" - basically everything is just a pointer to a GitHub repository. So, ProGet just packages it in a universal package and the Terraform CLI seems to be happy. What's a little unfortunate is that the hostname/feed need to be in the package, but that's also how Docker works. So I guess it can't be helped. Thanks, Alex
• D

  NPM Package name case sensitivity
  26 Apr 2024, 14:13 • dan.brown_0128   6 Nov 2024, 15:31

  10
  0
  Votes
  10
  Posts
  35
  Views

  6 Nov 2024, 15:31

  Hi @pbspec2_5732 , The script in the linked gist should fix the problem for you; it's not feasible/possible to try editing in the database directly due to the complexity of the model. https://gist.github.com/apxltd/351d328023c1c32852c30c335952fabb Thanks, Steve
• D

  Proget 2024 SCA Permissions
  4 Nov 2024, 22:07 • davidroberts63   5 Nov 2024, 20:14

  3
  0
  Votes
  3
  Posts
  7
  Views

  D 5 Nov 2024, 20:14

  Thank you, that did the trick.
• U

  Proget 2023 - docker manifest problem
  31 Oct 2024, 16:18 • udi.moshe_0021   5 Nov 2024, 06:54

  7
  0
  Votes
  7
  Posts
  16
  Views

  U 5 Nov 2024, 06:54

  Hi @atripp , found this config. i remember seeing it and left it checked because the description recommended it for registries like microsoft and for some reason i didn't pay attention to this until i figured out that i need to add "library" prefix. thank you very much for all the help.
• F

  ProGet Asset Directory
  4 Nov 2024, 15:20 • forbzie22_0253   5 Nov 2024, 03:20

  2
  0
  Votes
  2
  Posts
  6
  Views

  5 Nov 2024, 03:20

  Hi @forbzie22_0253 , That's not exposed in the UI at this time; is there a reason/use case you'd want to use it? it's primarily intended as a kind of backup of sorts. Thanks, Alana
• G

  Inedo.Agents.Ssh.SftpException: SFTP Protocol Error (permission denied) using SSH To Linux (otter)
  24 Oct 2024, 16:55 • gurdip.sira_1271   4 Nov 2024, 01:19

  3
  0
  Votes
  3
  Posts
  6
  Views

  G 4 Nov 2024, 01:19

  Had to set ownership on the folder on the Linux server, all green now thanks!
• D

  Projects, builds and SCA.
  26 Sept 2024, 06:44 • dlundqvist   28 Oct 2024, 08:06

  6
  0
  Votes
  6
  Posts
  32
  Views

  28 Oct 2024, 08:06

  Hi @daniel-lundqvist_1790 , You can select the edition you'd like to trial within the software itself, under Admin > License Key. Thanks, Alana
• Z

  Package Promotion via API with two restricted feeds
  24 Oct 2024, 09:19 • zs-dahe   24 Oct 2024, 10:12

  2
  0
  Votes
  2
  Posts
  13
  Views

  24 Oct 2024, 10:12

  Hi @zs-dahe , The Package Promotion API only be checks for permission against toFeed - you don't need any other permission on the toFeed or fromFeed. As far as more granular permissions, perhaps setting up a Personal Key for like a builds user would do the trick? That'll let you reuse the API Key and set up very granular permissions. We decided not to duplicate that granular permission setting in the API Keys because it's already confusing enough Thanks, Alex
• D

  Licensed pacakges showing on Unlicensed Local Packages listing
  21 Oct 2024, 17:11 • davidroberts63   24 Oct 2024, 02:38

  6
  0
  Votes
  6
  Posts
  19
  Views

  24 Oct 2024, 02:38

  @davidroberts63 thanks for figuring that one out, that's definitely bug... ... box style was correct, but enabled/disabled text looked at wrong property Easy fix, difficult to spot!
• M

  Buildmaster license on OpenShift
  23 Oct 2024, 09:50 • marc.ledent_9164   23 Oct 2024, 10:14

  2
  0
  Votes
  2
  Posts
  7
  Views

  23 Oct 2024, 10:14

  Hi @marc-ledent_9164 , Are you referring to the Machine UID from Manual Activation? I'm not sure what the Machine UID looks like in BuildMaster 7 on Linux, but I do recall that early versions of our products sometimes couldn't generate the string on some hardware. I think that's fixed now. The code is supposed to be based on the CPU (vendor ID, model, family, and stepping info) and the and the major version of the Inedo software (e.g. 5.1, 5.3, 2022, 2023). Thanks, Alana
• 

  Error deleting Debian package from API
  10 Oct 2024, 14:05 • Scati   18 Oct 2024, 08:42

  7
  0
  Votes
  7
  Posts
  21
  Views

  18 Oct 2024, 08:42

  Hi @gdivis, I've tried encoding the purl URL, and it works on both Windows and Linux, without having to interchange the distro and component order. However, it's a little strange that NuGet package purls work whether they are encoded or not. Anyway, I'm going to encode the URL in the code. Thank you very much.
• C

  pgutil: Read product name and version from file
  9 Oct 2024, 13:41 • caterina   16 Oct 2024, 20:15

  4
  0
  Votes
  4
  Posts
  16
  Views

  16 Oct 2024, 20:15

  Hi @caterina, We're a bit concerned that this is too specific for your usecase, and we're really struggling documenting it. Instead of doing this, we're thinking it might just make more sense to run (Get-Item 'C:\path\to\file.exe').VersionInfo using PowerShell and export these into variables instead. For Example: $versionInfo = (Get-Item 'C:\path\to\file.exe').VersionInfo $version = if($versionInfo.FileVersion) { $versionInfo.FileVersion} else { $versionInfo.ProductVersion } $productName = $versionInfo.ProductName pgutil builds scan --input=myApplication.csproj --project-name$productName" --version=$version Thanks, Dan