Support

• S

  ProGet Connector Timeout
  23 Jun 2024, 22:41 • scott.wright_8356   24 Jun 2024, 15:19

  2
  0
  Votes
  2
  Posts
  18
  Views

  24 Jun 2024, 15:19

  Hi @scott-wright_8356 , Once connector caching is enabled, the error pattern is not used, so we only have this warning. I added a small change via PG-2726 which will add the connector name. This will appear in the next maintenance release (2024.9), scheduled for this week. Removing connector caching should reveal the connector name, so maybe that helps you identify it until then Thanks, Steve
• S

  Unable to use debain connector (proget verison 2023.37)
  21 Jun 2024, 15:20 • sonali.prasad17_0018   21 Jun 2024, 18:11

  2
  0
  Votes
  2
  Posts
  6
  Views

  21 Jun 2024, 18:11

  Hi @sonali-prasad17_0018, Are you able to see the packages from the mirror in your Debian feed within ProGet? Also, do you get any errors when trying to update your source in Ubuntu? Thanks, Dan
• J

  ProGet SCA: SBOM export does not work + UI issue
  13 May 2024, 11:57 • jw   21 Jun 2024, 14:46

  10
  0
  Votes
  10
  Posts
  38
  Views

  21 Jun 2024, 14:46

  @jw thanks for clarifying! The pipelines in ProGet are not really meant to track status. The main reason for the build stages is to control automatic archival, issue creation, and notifications. For example, your stable releases might stay in a "Released" stage indefinitely. We also had (in the preview feature) threre build statues: Active, Archived, Released. We don't use Released currently, but definitely something we may bring back. You don't want to delete a Released build, but you would probably want to delete an Archived build. Anyway, I'd check out the pgutil builds promote command - that way you can keep your "archival rules" in ProGet.
• J

  Enforcing Licence Policies/Blocking?
  20 Jun 2024, 10:43 • johnsen_7555   21 Jun 2024, 13:47

  5
  0
  Votes
  5
  Posts
  18
  Views

  J 21 Jun 2024, 13:47

  Thanks, Dean. This new build does indeed resolve the issue: Have a good weekend.
• 

  Create a grouped "new" Debian feed using the API
  13 Jun 2024, 11:53 • Scati   18 Jun 2024, 10:48

  4
  0
  Votes
  4
  Posts
  21
  Views

  18 Jun 2024, 10:48

  Hi @stevedennis, Seeing the PG-2716 solution included in the last release 24.0.8, we upgraded. In 2024.8 version the creation of new Debian feed works perfect, but the feedGroup property doesn't seem to do it. Could you double check if feedGroup is the right name, and if it's included on current version?
• B

  Support for Rust Cargo packages
  19 May 2021, 21:32 • brett.polivka   14 Jun 2024, 13:48

  4
  1
  Votes
  4
  Posts
  23
  Views

  14 Jun 2024, 13:48

  Hi @fabrice-mejean_6049 , @brett-polivka Thanks for the feedback! With ProGet 2023 out of the way (which made developing new feeds a lot simpler), and the addition of the Cargo Registry Web API, this is something we're much more open to implementing. We want a user partner, someone who is already using Rust/Cargo and would be able to work with testing/developing this for us. Currently there hasn't been any market demand from prospects or other users.... and for your team, seems like a "nice to have" more than anything. Thanks, Steve
• A

  Error for Visual Studio Extensions feed
  13 Jun 2024, 09:25 • arkady.karasin_6391   13 Jun 2024, 14:11

  6
  0
  Votes
  6
  Posts
  7
  Views

  13 Jun 2024, 14:11

  Great! I don't believe that there is any public reporting of VISX package vulnerabilities, so this is not data that would be available in ProGet either
• D

  Otter "reverse" way working
  13 Jun 2024, 11:06 • daniels   13 Jun 2024, 13:05

  2
  0
  Votes
  2
  Posts
  5
  Views

  13 Jun 2024, 13:05

  Hi @daniels, This is technically possible, but it's not something that we support out-of-the-box I'm afraid. The closest way to accomplish something like this would be: Use the Otter API to create a server entry with the appropriate roles (similar to what you'd do in the UI) Install/run the agent on the computer which will connect to Otter Use the Otter API to trigger a job/ remediation Optionally, remove the server from Otter and Stop/uninstall the Agent So it's not easy from the user perspective. However. if Otter and this approach looks like it will work for you, then it's something we can definitely explore together as a user/customer, and build out a use case / case study / etc. That'd be best to start a conversation w/ someone in our customer / sales team on that. Otherwise, there really hasn't been enough demand for this particular use case, and it's hard enough to market Otter's other use cases, let alone develop build new ones ;) FYI - note that you can also run the Inedo Agent in outgoing mode: https://docs.inedo.com/docs/inedoagent-overview#communication-modes Thanks, Steve
• 

  Linux Performance & SQL Server Issues
  7 Jun 2024, 12:35 • apxltd   12 Jun 2024, 11:21

  5
  0
  Votes
  5
  Posts
  39
  Views

  12 Jun 2024, 11:21

  Turns out the errors I encountered were entirely related to the "new" SQL Server driver that ProGet 2024 was using. Although this was in beta for well over a year, it was "only" in production for a few months by the time we incorporated it into ProGet. This driver issue impacts anyone who uses .NET on Linux. As I mention, I think it's pretty clear that Microsoft has effectively abandoned SQL Server. It's one thing to release something this low-quality and untested... and another to have it linger with issues like this in production for months. We will be moving to Postgres, which do not have these endemic problems. In the meantime, I have instituted the "one year rule" for Microsoft products - meaning, unless it's been shipped in their general release channel for a year, we will not even consider using it.
• M

  pgutils and Maven
  11 Jun 2024, 13:35 • matt.wood_5559   11 Jun 2024, 14:28

  2
  0
  Votes
  2
  Posts
  9
  Views

  11 Jun 2024, 14:28

  Hi @matt-wood_5559, Our solution for Maven builds is to leverage CycloneDX to generate the SBOM, and then upload that SBOM to ProGet: https://docs.inedo.com/docs/proget-sca-java We had considered reproducing the functionality, but the only way to get dependency information from a Maven project is to create a Maven plugin and "watch" the build as it happens --- and that's already what CycloneDX does very effectively. If you can think of ways to make it easier to work with pgutil we're very open to that :) Thanks, Alana
• M

  Connecting feeds
  11 Jun 2024, 13:49 • matt.wood_5559   11 Jun 2024, 14:18

  2
  0
  Votes
  2
  Posts
  15
  Views

  11 Jun 2024, 14:18

  Hi @matt-wood_5559, I think I understand what you're asking - basically you'd like to create a feed when some users see one set of packages, but other users see a different set? This is definitely not possible, and it's simply not something ProGet does from a design standpoint: i.e. "file-system type" granular permissions. While it might seem convenient or nice to give users "just a single URL" to access, it ends up makes things much more complicated to configure/use/maintain. Basically some users will get random "package not found" errors while others will build fine. It'd be very confusing and big headache. Instead, it's best to educate on different feeds/repositories, and help them use and request access as needed. Hope that helps, Alana
• M

  Maven additional artifacts
  11 Jun 2024, 13:38 • matt.wood_5559   11 Jun 2024, 14:02

  3
  0
  Votes
  3
  Posts
  9
  Views

  M 11 Jun 2024, 14:02

  Ok that makes sense thanks, I can see the option to add addition files now.
• M

  Assigning package versions
  11 Jun 2024, 13:28 • matt.wood_5559   11 Jun 2024, 14:02

  2
  0
  Votes
  2
  Posts
  8
  Views

  11 Jun 2024, 14:02

  Hi @matt-wood_5559, I might need a little more information / screenshots with what you're looking at here.... There could be a bug/oversight, etc. Perhps you could walk through steps / show screenshots of what you're seeing? If it's on maven central, we can then repro and take a look Thanks, Alana
• M

  License discovery for Maven packages
  11 Jun 2024, 13:16 • matt.wood_5559   11 Jun 2024, 14:00

  2
  0
  Votes
  2
  Posts
  7
  Views

  11 Jun 2024, 14:00

  Hi @matt-wood_5559, A Maven package's license is determined by the license field in the POM: https://maven.apache.org/pom.html#Licenses There are unfortunately no real standards here, and the author can put in anything from a SPDX Code (which is recommended, by the way) to a string like "Apache license" (which probably means apache 2.0, but who knows?). We would rather not guess what the author might have intended, so ProGet only detects licenses with SPDX codes and then lets you decide how assign which codes to other license types as you come across packages that don't follow SPDX. However, once you start associating those strings with licenses, it will work for future packages. Thanks, Alana
• F

  ProGet Proxy Authentication
  7 Jun 2024, 15:33 • forbzie22_0253   11 Jun 2024, 03:19

  4
  0
  Votes
  4
  Posts
  16
  Views

  11 Jun 2024, 03:19

  @forbzie22_0253 setting the proxy programmatically is not something we currently support or document at this time, but if you're dedicated you could use native API to the newly-developer settings API: https://github.com/Inedo/pgutil/blob/thousand/pgutil/Settings/ListCommand.cs It's configured via values in the Configuration table.
• M

  X-Api-Key vs X-ApiKey header
  7 Jun 2024, 20:36 • maciej.luszczynski_5271   10 Jun 2024, 17:11

  2
  0
  Votes
  2
  Posts
  6
  Views

  10 Jun 2024, 17:11

  Hi @maciej-luszczynski_5271, Thanks for bringing this to our attention. I have corrected the example as suggested. Thanks, Dan
• F

  Programmatic way to check activation
  7 Jun 2024, 16:12 • forbzie22_0253   10 Jun 2024, 10:48

  3
  0
  Votes
  3
  Posts
  8
  Views

  F 10 Jun 2024, 10:48

  @atripp the health endpoint looks good, thanks
• F

  Unable to use the API
  5 Jun 2024, 15:43 • francesco.campanella_3733   10 Jun 2024, 10:16

  8
  0
  Votes
  8
  Posts
  24
  Views

  10 Jun 2024, 10:16

  @francesco-campanella_3733 thanks for continuing to research this - we just haven't had a chance to look further. Did you try editing the feed settings (especially the Feed Features, which would save a new Feed Config), and then re-saving again? We will fix the bug, I would just like to be able to reproduce it so we know for sure what's causing it :)
• F

  Setting API key permissions
  31 May 2024, 17:45 • forbzie22_0253   7 Jun 2024, 16:10

  8
  0
  Votes
  8
  Posts
  24
  Views

  F 7 Jun 2024, 16:10

  @atripp thanks, resolved now.
• J

  ProGet SCA 2024 Preview Feedback - Package detection still hit or miss
  12 Mar 2024, 09:50 • jw   7 Jun 2024, 02:00

  22
  0
  Votes
  22
  Posts
  106
  Views

  7 Jun 2024, 02:00

  Hi @sebastian, Thanks for sharing your thoughts on this! Few things to point out... [1] The "Missing Package Problem" is not as bad in ProGet 2024, mostly because it will only apply when there's a license rule. In ProGet 2023, a "missing package" would happen even for vulnerabilities. [2] We're working on a new feature/module (tentatively called "Remote Metadata") that is intended to routinely cache/update meatdata from public repos like nuget.org, npmjs.org, etc. This feature enables two usecases: Routinely update "server-side metadata" like Deprecated, Unlisted on cached packages Fetch metadata for packages not in ProGet during build analysis It works somewhat independently, and basically it'll just show up on the Admin tabs as like "Remote Metadata" and you can configure providers, urls, etc. I hope to have a prototype in a couple weeks and will post some details on a new forum posts. As an FYI this is something we will limit in the Free/Basic editions and have full-featured in the ProGet Enterprise product. [3] "Package In ProGet" could be a policy rule to add after RMetadata feature, though it's probably not a big deal if ProGet can detect licenses thanks to RMetadata Best, Alex