mirror of
https://github.com/safedep/pmg.git
synced 2026-08-03 07:24:09 +02:00
31f23fd065
* define contract for package executors * introduce npx executor * add npx and pnpx cmd support * fix typo * rm PackageExecutor and depend on PackageManager interface * add support for PTY to handle parent-child process interaction * refactor PTY handling in proxy flow * enforce interactiveSession interface check * close reader explicitly and clean npm version for pkg executors * rm interaction from interceptors * add docs and wait for outputRouter before exit * add support for non interactive TTY for proxy mode * add support for CI env var check for non interactive tty proxy mode * update readme to include npx, pnpx support * Update internal/flows/proxy_flow.go Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com> * update ptyx lib * fix docs typo --------- Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
19 lines
591 B
Markdown
19 lines
591 B
Markdown
# Trusted Packages
|
|
|
|
`pmg` allows you to trust a package. Trusted packages are not scanned and always allowed to be installed.
|
|
|
|
## Configuration
|
|
|
|
Trusted packages are configured in the `config.yml` file. See [config template](../config/config.template.yml) for the configuration schema.
|
|
If you don't have a `config.yml` file, you can create one by running `pmg setup install`.
|
|
|
|
### Example
|
|
|
|
```yaml
|
|
trusted_packages:
|
|
- purl: pkg:npm/@safedep/pmg
|
|
reason: "All versions of PMG are trusted"
|
|
- purl: pkg:npm/express@4.18.0
|
|
reason: "Version 4.18.0 of Express is a trusted package"
|
|
```
|