Hello, I am looking to write an extension for vulnerability scanning to integration into our preferred scanning software. I have already written a way to do this through github but we want to be able to do it through proget at well.
However it seems the Inedo.SDK documentation on what the classes are, how to use them are sorely lacking. Perhaps I am just really bad at finding good examples... but is there better documentation on how to create extensions.
I have a few use cases I would like to explore.
-
When new package is uploaded, the extension triggers a scan with our thirdparty software (through their api) and then reports the vulnerability state to proget.
-
when a prerelease package is promoted to full-release, i would like to move that package to another feed, and then make an API call to our Octopus Deploy server to create a release.
-
When a package is put into a certain feed, a event is triggered in which that package is automatically pushed to another proget server (in another cloud region, cannot connect them due to network issues)
is this possible with extensions? Are there better ways, such as webhooks we can setup? Thanks in advance.
Kenneth Garza