Support

• M

  Buildmaster event log : Error 500 while accessing the eventlog
  27 Nov 2024, 09:15 • marc.ledent_9164   2 Dec 2024, 13:11

  4
  0
  Votes
  4
  Posts
  8
  Views

  M 2 Dec 2024, 13:11

  @atripp Thanks for your reply... This is a good reason to planify an upgrade! Marc
• ?

  Composer/Packagist feeds
  proget feeds • 20 Jan 2015, 15:44 • Chris Charabaruk   29 Nov 2024, 12:51

  10
  0
  Votes
  10
  Posts
  52
  Views

  M 29 Nov 2024, 12:51

  According to https://docs.inedo.com/docs/proget/feeds/other-types the Composer feed type is planned for a maintenance release of ProGet 2024, which is great news! We're currently using Satis for PHP packages alongside ProGet (for NuGet, npm, Python). Working with Satis is a bit cumbersome, that's why we would very much prefer using ProGet for PHP packages, too. Satis downloads the distribution zips for all packages and generates a static site with package metadata and the zips. I guess ProGet will handle Composer feeds in a similar fashion? Feel free to reach out to me via email if you need further feedback or beta testers for the Composer feed type.
• 

  ProGet License Text
  27 Nov 2024, 14:54 • steviecoaster   27 Nov 2024, 23:34

  2
  0
  Votes
  2
  Posts
  9
  Views

  27 Nov 2024, 23:34

  Hi @steviecoaster , Very cool, looking forward to the packages! Here is the URL for the ProGet license agreement: https://inedo.com/proget/license-agreement The Inedo Hub does not have a separate license agreement, we just consider it part of the product; so you can just use ProGet's: https://inedo.com/proget/license-agreement Thanks, Nanci
• D

  400 Bad request when uploading MD5 files to Proget
  27 Nov 2024, 11:26 • Dony.Thomas_7156   27 Nov 2024, 14:42

  2
  0
  Votes
  2
  Posts
  4
  Views

  27 Nov 2024, 14:42

  Hi @Dony-Thomas_7156 , You can ignore these errors. ProGet doesn't process these requests (i.e. store the content); instead ProGet simply generates the appropriate hash of a maven artifact when you request .ext.md5, etc. It's dynamic, not a file system. That said, I do know that later versions of ProGet will simply return a 200 so that it does'nt cause an error with Marvin. I recommend to upload to the latest ProGet 2024, and use the New Maven feeds. Thanks, Alana
• M

  pgutil: metadata set custom returning BadRequest (400): Expected application/json Content-Type
  25 Nov 2024, 17:31 • matthew.crowley_4142   26 Nov 2024, 16:38

  3
  0
  Votes
  3
  Posts
  19
  Views

  M 26 Nov 2024, 16:38

  @atripp Thanks for the response. Seems we are using a quite old version of Proget - Version 2022.25 (Build 9). We are planning to upgrade it in a few months, but didn't think it would cause issues. We might have to wait for an upgrade to our systems to get this fixed then.
• D

  ProGet: Install extensions from administration page
  25 Nov 2024, 13:30 • dlundqvist   26 Nov 2024, 08:23

  4
  0
  Votes
  4
  Posts
  12
  Views

  26 Nov 2024, 08:23

  Hi @daniel-lundqvist_1790 , Good question! ProGet 2024 ships with the latest version of all available extensions, so there's usually not going to be a new one unless we add ones later (e.g. GCP) or update/fix ones. Most extensions are used by BuildMaster; for example, the Jenkins extension lets you do cool stuff like import/orchestrate Jenkins servers and deploy artifacts from them: https://docs.inedo.com/docs/buildmaster/tools-service-integrations/buildmaster-integrations-jenkins Thanks, Alana
• F

  IIS appConcurrentRequestLimit
  22 Nov 2024, 08:39 • forbzie22_0253   25 Nov 2024, 11:23

  4
  0
  Votes
  4
  Posts
  12
  Views

  25 Nov 2024, 11:23

  Hi @forbzie22_0253 , We have never seen a case where changing an IIS setting has benefited performance in any way whatsoever; instead we have only found headaches and problems from users modifying them. Those settings are not designed for modern .NET applications, but for like .NET Framework, classic ASP, etc. So please don't touch them :) Thanks, Alana
• S

  GET Request "lt" operator not working for a string in ProGet v2024.16
  21 Nov 2024, 14:20 • sneh.patel_0294   23 Nov 2024, 05:11

  4
  0
  Votes
  4
  Posts
  15
  Views

  23 Nov 2024, 05:11

  Hi @sneh-patel_0294 , Here is the NuGet API Documentation: https://learn.microsoft.com/en-us/nuget/api/overview Here is the Packages API query you would want: https://docs.inedo.com/docs/proget/reference-api/proget-api-packages/proget-api-packages-list-versions#http-response-specification Regardless of what APi you use, you'll need to change your query strategy: Get a list of all versions of CPS.Regression from the server From that list, filter by 9.1 and then sort by latest that's not prerelease There are some sample scripts that might be helpful on our docs as well: https://docs.inedo.com/docs/proget/reference-api/proget-api-packages/proget-api-packages-list-versions#list-all-non-prerelease-versions-powershell Thanks, Alana
• S

  pgutil exclude test and build projects
  21 Nov 2024, 10:33 • sebastien.gamby_3349   22 Nov 2024, 12:25

  2
  0
  Votes
  2
  Posts
  8
  Views

  22 Nov 2024, 12:25

  Hi @sebastien-gamby_3349, I don't see an option to do anything like that, but we're happy to brainstorm/think of an option to add. The main issue is documentation and avoiding having 1000 options. I see that there's a ---do-not-scan-node_modules switch; maybe that could be converted to a --excludePaths={relativePathCsv} or something? So ---do-not-scan-node_modules would become --excludePaths=node_modules and you could do --excludePaths="myproj1.csproj,myproj2.csproj" or something? Just brainstorming here, not sure if that's even feasible. Here is the current documentation for the command Description: Generates a minimal SBOM from project dependencies and uploads it to ProGet Usage: pgutil builds scan [options] Options: --input=<input> (REQUIRED) Project to scan for dependencies --project-name=<project-name> (REQUIRED) Name of the component consuming the dependencies --version=<version> (REQUIRED) Version of the component consuming the dependencies --api-key=<api-key> ProGet API key used to authorize access --do-not-scan-node_modules Do not scan the node_modules directory when scanning for package-lock.json files --include-dev-dependencies Include npm development dependencies from the package-lock.json file in the generated SBOM document --include-project-references Include dependencies from referenced projects in the generated SBOM document --password=<password> ProGet user password used to authorize access --project-type=<project-type> Type of the consuming project (default=library) --scanner-type=<scanner-type> Type of project scanner to use; auto, npm, NuGet, PyPI, or Conda (default=auto) --source=<source> Named source or URL of ProGet --username=<username> ProGet user name used to authorize access -?, --help Show help and usage information Examples: $> pgutil builds scan --input=WebDataTool.csproj --project-name="Web Data Tool" --version=1.2.3 ``
• G

  MFA on Integrated Auth
  22 Nov 2024, 07:00 • george_4088   22 Nov 2024, 12:18

  4
  0
  Votes
  4
  Posts
  7
  Views

  22 Nov 2024, 12:18

  Hi @george_4088, That is correct, but a brute-force attack wouldn't succeed unless an administrator used something silly like admin for their username and password for their password. You could just as easily integrate with an LDAP/Active Directory server, which will add timeouts and account lockouts to make it impossible to "crack" in our lifetime. SAML is fine too. My point is that it's like 1000 times more likely that the API Key used to publish those Chocolatey packages would be exposed in logs, configuration files, etc. That's the attack surface you want to be careful of. Cheers, Alana
• C

  pgutil: PackageLockOnly for npm projects
  10 Oct 2024, 11:14 • caterina   20 Nov 2024, 17:13

  7
  0
  Votes
  7
  Posts
  23
  Views

  20 Nov 2024, 17:13

  Hi @caterina, No problem, thanks for getting back to us. We have an upcoming release of pgutil that will include this flag. We also have improved this command a bit by allowing you to use the working directory which will search for the right files instead of --input having to specify the path to the file (although you still can). It will now also automatically audit the scan directly after, you can use --noaudit to skip the audit. We should have those updates pushed this week. Thanks, Rich
• F

  Debian package replication based on hash values
  15 Nov 2024, 18:36 • frei_zs   19 Nov 2024, 11:08

  3
  0
  Votes
  3
  Posts
  10
  Views

  F 19 Nov 2024, 11:08

  Hey Alana, thank you very much. Maybe this is some issue with our setup then. I will further check and investigate on our side first. :) Best, Frank
• P

  How to configure raft git in Otter
  otter • 17 Nov 2024, 11:16 • philippe.camelio_3885   18 Nov 2024, 07:46

  3
  0
  Votes
  3
  Posts
  3
  Views

  P 18 Nov 2024, 07:46

  Hello @atripp Oups ! I made a mistake, I used master instead of main for the branch. It is working fine Sorry for this Best regards PhilippeC.
• C

  ProGet: Different behavior for build creation
  15 Oct 2024, 13:59 • caterina   13 Nov 2024, 11:25

  9
  0
  Votes
  9
  Posts
  28
  Views

  13 Nov 2024, 11:25

  Hi @caterina , This will be fixed in the next maintenance release via PG-2829. I just checked in the change. I made a mistake when making the original change, and used the ProjectBuildId instead of the ProjectId when validating the if other builds exists. So it works if the Ids match perfectly (like when I tested it). Note this only impacts the UI, and we don't really expect users to create builds via the UI. Thanks, Alana
• R

  Vulnerability JQuery Proget 5.2.14
  6 Nov 2024, 09:15 • r.vanmeurs_4680   12 Nov 2024, 07:01

  3
  0
  Votes
  3
  Posts
  9
  Views

  R 12 Nov 2024, 07:01

  Thanks for answering me, clear !
• J

  Terraform private registry
  8 Jul 2022, 22:23 • jeff.miles_5073   9 Nov 2024, 02:55

  6
  3
  Votes
  6
  Posts
  52
  Views

  9 Nov 2024, 02:55

  Hi @kichikawa_2913 @jeff-miles_5073 @martin-helgesen_8100 , Good news! We've got a Terraform Feed working on version 2024.20-rc.4 and it seems ready for release: I'd love to get a second set of eyes on our approach and the docs; this was a really interesting protocol/API to work with because there are no "Terraform Packages" - basically everything is just a pointer to a GitHub repository. So, ProGet just packages it in a universal package and the Terraform CLI seems to be happy. What's a little unfortunate is that the hostname/feed need to be in the package, but that's also how Docker works. So I guess it can't be helped. Thanks, Alex
• D

  NPM Package name case sensitivity
  26 Apr 2024, 14:13 • dan.brown_0128   6 Nov 2024, 15:31

  10
  0
  Votes
  10
  Posts
  34
  Views

  6 Nov 2024, 15:31

  Hi @pbspec2_5732 , The script in the linked gist should fix the problem for you; it's not feasible/possible to try editing in the database directly due to the complexity of the model. https://gist.github.com/apxltd/351d328023c1c32852c30c335952fabb Thanks, Steve
• D

  Proget 2024 SCA Permissions
  4 Nov 2024, 22:07 • davidroberts63   5 Nov 2024, 20:14

  3
  0
  Votes
  3
  Posts
  7
  Views

  D 5 Nov 2024, 20:14

  Thank you, that did the trick.
• U

  Proget 2023 - docker manifest problem
  31 Oct 2024, 16:18 • udi.moshe_0021   5 Nov 2024, 06:54

  7
  0
  Votes
  7
  Posts
  13
  Views

  U 5 Nov 2024, 06:54

  Hi @atripp , found this config. i remember seeing it and left it checked because the description recommended it for registries like microsoft and for some reason i didn't pay attention to this until i figured out that i need to add "library" prefix. thank you very much for all the help.
• F

  ProGet Asset Directory
  4 Nov 2024, 15:20 • forbzie22_0253   5 Nov 2024, 03:20

  2
  0
  Votes
  2
  Posts
  6
  Views

  5 Nov 2024, 03:20

  Hi @forbzie22_0253 , That's not exposed in the UI at this time; is there a reason/use case you'd want to use it? it's primarily intended as a kind of backup of sorts. Thanks, Alana