Support

• P

  Publish a Docker image from Gitlab pipeline using Kaniko to Proget
  proget • 18 Apr 2025, 09:00 • pmsensi   18 Apr 2025, 16:32

  3
  0
  Votes
  3
  Posts
  8
  Views

  P 18 Apr 2025, 16:32

  Hello @atripp , Thank you for your help. We have an intermediate certificate (proxy), which I think, as you point out, can be the problem. I will clarify with our IT department. Anyway, after reading a little bit more, there is a variable to force Kaniko to use HTTP/1.1. variables: GODEBUG: "http2client=0" After adding that, everything works :) Thank you! Best Regards, Pedro
• S

  pgutil Access denied
  11 Apr 2025, 06:48 • si.peham_2672   16 Apr 2025, 14:03

  6
  0
  Votes
  6
  Posts
  25
  Views

  16 Apr 2025, 14:03

  Hi @si-peham_2672, As far as I can tell, it looks like there is still a permission issue with the working directory that is preventing file listing. The workaround to use the --input argument seems to get past that issue, so I would continue to use that. For your reference, I did test this locally and on a test server, and both worked without issue. If you are interested, here is a link to our code that is searching for the file (https://github.com/Inedo/pgutil/blob/5001174a4c786bb238e8546d18d82fed71cfcc58/Inedo.ProGet/Scan/DependencyScanner.cs#L114). The SourceFileSystem.Default.FindFilesAsync just calls new DirectoryInfo(folder).EnumerateFiles and then matches against the name. For the Specified argument was out of the range of valid values error, that will be resolved in ProGet 2024.33, which will be released this Friday. If you have any other questions, please let us know. Thanks, Dan
• G

  Image Scanning
  15 Apr 2025, 07:39 • guilherme.silva_2532   15 Apr 2025, 20:58

  4
  0
  Votes
  4
  Posts
  15
  Views

  15 Apr 2025, 20:58

  Hi @guilherme-silva_2532, The warnings in the blob layer scanner are to be expected in most images. Not every layer includes a file system. The layer scanner scans each layer for an application database. This will vary from layer to layer. There was also a bug released in ProGet 2024.32 that was not recording certain layer scanner results properly. This will be fixed in PG-2943 and will be released in the maintenance release this Friday. This may be why you are not seeing any packages found in this container. Thanks, Dan
• M

  Feature request - PGUtil Assets creation
  10 Apr 2025, 08:19 • michal.roszak_0767   15 Apr 2025, 03:12

  4
  0
  Votes
  4
  Posts
  17
  Views

  15 Apr 2025, 03:12

  @michal-roszak_0767 currently maven2 is a workaround, so it will continue to warm. In ProGet 2025, Maven will create the expected feed type.
• M

  Feature request - PGUtil "Security" editor
  10 Apr 2025, 08:03 • michal.roszak_0767   15 Apr 2025, 03:11

  4
  0
  Votes
  4
  Posts
  21
  Views

  15 Apr 2025, 03:11

  Hi @michal-roszak_0767, This is what I meant by the Security API -- a combination of HTTP Endpoints and pgutil commands. We will consider them for our ProGet 2026 roadmap. So until then you'll need to use the Native API; At this time the Native API is the option. You can also check out @steviecoaster 's PowerShell module, which has some modules that can help https://github.com/steviecoaster/InedoOps Thanks, Alana
• P

  Question About Vulnerability Assessment Expiry Behavior in ProGet
  3 Apr 2025, 17:18 • pooyan.zamanian_1706   10 Apr 2025, 12:36

  10
  0
  Votes
  10
  Posts
  37
  Views

  P 10 Apr 2025, 12:36

  @rhessinger Cool, thanks for the information. April 18th is great.
• M

  PGUtil and "Maven (New)" Feed
  10 Apr 2025, 07:12 • michal.roszak_0767   10 Apr 2025, 12:35

  2
  0
  Votes
  2
  Posts
  5
  Views

  10 Apr 2025, 12:35

  Hi @michal-roszak_0767, Ah, that must have been an oversight; trivial change but best we don't change it until ProGet 2025. I think you can use maven2 as the type for now, it's the internal identifier. Later on, we will make it maven and mavenlegacy Thanks, Alana
• M

  API request Unauthorized on Windows
  8 Apr 2025, 07:39 • michal.roszak_0767   10 Apr 2025, 07:57

  10
  0
  Votes
  10
  Posts
  23
  Views

  M 10 Apr 2025, 07:57

  @atripp Done: https://forums.inedo.com/topic/5347/feature-request-feed-other-settings-editor Michal
• M

  Jenkins Plugin
  10 Apr 2025, 06:52 • michal.roszak_0767   10 Apr 2025, 07:47

  2
  0
  Votes
  2
  Posts
  8
  Views

  10 Apr 2025, 07:47

  Hi @michal-roszak_0767 , This is a third-party / community plugin and we have no plans to maintain it ourselves. I hear it still works, but is a bit outdated. HOWEVER, the former owner very recently "handed it over" to another community member. So this may mean we'll see some "new life" or changes -- I think they're still figuring out how to actually publish a new version, or something like that: https://github.com/jenkinsci/inedo-proget-plugin Thanks, Alana
• M

  This topic is deleted!
  10 Apr 2025, 07:37 • michal.roszak_0767   10 Apr 2025, 07:37

  1
  0
  Votes
  1
  Posts
  2
  Views

  No one has replied

• Z

  Retention Activation via API?
  8 Apr 2025, 08:24 • zs-dahe   9 Apr 2025, 07:16

  3
  0
  Votes
  3
  Posts
  11
  Views

  Z 9 Apr 2025, 07:16

  @zs-dahe said in Retention Activation via API?: with the Feeds API it is possible to add retention rules for feeds (https://docs.inedo.com/docs/proget/administration/retention-rules). However, I don't see a possibility to actually activate the retention for a specific feed via the API. Am I missing something or is the retention intended to be activated only via the web UI? Our usecase is that we would like to activate a specific set of rules to many feeds at once. For this, we must also ensure that the retention is actually activated and an API endpoint would be convenient to enforce this. Hi Alana, thanks for the quick reply. I opened a feature reqeust ticket for this :) Best regards Daniel
• R

  Unable to promote: Distribution must be specified when adding a Debian package.
  7 Apr 2025, 20:18 • rhowell_8827   8 Apr 2025, 18:59

  4
  0
  Votes
  4
  Posts
  14
  Views

  R 8 Apr 2025, 18:59

  Awesome! Thanks so much for the quick response.
• U

  docker.osgeo.org/geoserver:2.27.x
  3 Apr 2025, 09:10 • udi.moshe_0021   8 Apr 2025, 10:31

  5
  0
  Votes
  5
  Posts
  11
  Views

  U 8 Apr 2025, 10:31

  Hi @rhessinger , i have followed your configuration and i have managed to download the docker. to tell you the truth, i do not know what has changed because the only thing that i have changed is the checkbox next to "library/..." and i have played with this prior to opening this case. thank you very much.
• M

  Implementing sort by modification date on pgutils for retrieving Assets
  7 Apr 2025, 12:58 • mmaharjan_0067   7 Apr 2025, 13:19

  2
  0
  Votes
  2
  Posts
  6
  Views

  7 Apr 2025, 13:19

  Hi @mmaharjan_0067 , The pgutil assets list command is intended for interactive use and should not be parsed; it could change in future versions. Instead, you can just call the endpoint directly, which will contain the details you're looking for: https://docs.inedo.com/docs/proget/api/assets/folders/list Cheers, Alana
• V

  Packages not found after upgrading to 2024.29
  24 Mar 2025, 07:36 • v.makkenze_6348   1 Apr 2025, 11:30

  8
  0
  Votes
  8
  Posts
  31
  Views

  1 Apr 2025, 11:30

  Hi @v-makkenze_6348, Glad to hear it! Thanks, Rich
• D

  (500) Server Error When editing description of a Universal Package
  21 Mar 2025, 10:06 • daniel.pardo_5658   31 Mar 2025, 09:02

  5
  0
  Votes
  5
  Posts
  21
  Views

  D 31 Mar 2025, 09:02

  Thank you so much!
• F

  Otterscript: Usage of Success exit code or EXEC operation - clarifications
  5 Jun 2024, 09:06 • fabio.xodo_3872   27 Mar 2025, 13:31

  12
  0
  Votes
  12
  Posts
  52
  Views

  S 27 Mar 2025, 13:31

  Hi Alana, This seems to work for what I am trying to accomplish. Thanks! Scott
• P

  Maven Policy not blocking Noncompliant packages
  26 Mar 2025, 18:28 • parthu.reddy   27 Mar 2025, 06:08

  4
  0
  Votes
  4
  Posts
  9
  Views

  27 Mar 2025, 06:08

  Hi @parthu-reddy , If you can provide my with some step-by-step instructions (reproduction case), then I can see if if there's a bug in ProGet. However we can't really change the "license file is embedded in the package file" technical requirement. That said... using custom licenses for blocking package is definitely inappropriate. Please do not do that. It will cause you headaches and probably business disruptions later. There are already tools to prevent users from downloading packages from ProGet, this is not how you want to do it. The easiest solution here is to align the security team's understanding/expectations align with reality. You don't want to try to configure ProGet in unrealistic ways that will lead to actual problems/risks. I suspect the security team is conflating "vulnerable packages" with "malware and viruses", so it'd be best to take this opportunity to educate them on how packages / ProGet works. ProGet can prevent users from downloading certain packages, but vulnerable packages are freely available on the internet for download. A vulnerable package is NOT some a "virus in a lab that can escape" and infect a system A package is just a library and cannot run on its own If a user has a copy of vulnerable package, they can't use it to "hack" a system with it nor will it cause any harm Vulnerable packages simply shouldn't be used as building blocks in your own applications Thanks, Alana
• P

  Need info on blocking packages
  27 Mar 2025, 04:43 • parthu.reddy   27 Mar 2025, 05:24

  2
  0
  Votes
  2
  Posts
  7
  Views

  27 Mar 2025, 05:24

  Hi @parthu-reddy , This hasn't changed; to "Set Package Status", you need to first Pull the Package to the feed. From there, you can a compliance rule override of Always Block or Always Allow Downloads. Thanks, Alana
• C

  Proget: SCA Event Notifier not working
  29 Jan 2025, 13:35 • caterina   25 Mar 2025, 21:03

  8
  0
  Votes
  8
  Posts
  32
  Views

  25 Mar 2025, 21:03

  Hi @caterina, I'm sorry about this. There looks like there was a conflict with another notifier change. I have created a new ticket, PG-2933, to fix this and it will be released in the next maintenance release. Thanks, Dan