Needing examples for Using Inedo.SDK for proget

kenneth.garza_2882

Hello, I am looking to write an extension for vulnerability scanning to integration into our preferred scanning software. I have already written a way to do this through github but we want to be able to do it through proget at well.

However it seems the Inedo.SDK documentation on what the classes are, how to use them are sorely lacking. Perhaps I am just really bad at finding good examples... but is there better documentation on how to create extensions.

I have a few use cases I would like to explore.

When new package is uploaded, the extension triggers a scan with our thirdparty software (through their api) and then reports the vulnerability state to proget.
when a prerelease package is promoted to full-release, i would like to move that package to another feed, and then make an API call to our Octopus Deploy server to create a release.
When a package is put into a certain feed, a event is triggered in which that package is automatically pushed to another proget server (in another cloud region, cannot connect them due to network issues)

is this possible with extensions? Are there better ways, such as webhooks we can setup? Thanks in advance.

Kenneth Garza

kenneth.garza_2882

@kenneth-garza_2882 Actually as an afterthought I looked up webooks and found they might be better for my usecases.

I am still interested in better docs for proget extensions though.

atripp

Hi @kenneth-garza_2882 ,

Based on your use cases, an extension wouldn't be a very good fit... and Webhooks are the way to go.

For ProGet (unlike BuildMaster/Otter), extensions are really specialized, and it's pretty rare for folks to make their own, and we're keen on helping anyways.

For example, depending on what your vulnerability scanning software is, we'd love to help and even adopt the integratino, so other users can use it.

The main three things we see are:

Cloud Storage;
- https://github.com/Inedo/inedox-aws
- https://github.com/Inedo/inedox-whitesource
Vulnerability Scanning / Package Blocking
- https://github.com/Inedo/inedox-sonatype
- https://github.com/Inedo/inedox-azure
User Directory
- https://github.com/Inedo/inedox-inedocore

And the best way to do those, are mostly to copy the examples/code we already have.

Let us know more details, and we can do ourbest to help!

Thanks,
Alana