Skip to content

Conversation

mcgov
Copy link
Collaborator

@mcgov mcgov commented Sep 30, 2025

Implements apt-get build-dep, dnf/yum build-dep, and zypper si -d to install source package build dependencies using the package manager source package metadata.

@mcgov
Copy link
Collaborator Author

mcgov commented Oct 1, 2025

Oh wow I realized we aren't actually confirming to the apt sources standard. We parse the output of apt update instead for some reason. I might go ahead and fix that as well.

r"URIs:\s*(?P<uri>\S+)\s*"
r"Suites:\s*(?P<suite>.*)\n"
r"Components:\s*(?P<components>.+?)\s*"
r"(?P<options>((?:\S+:\s*.+)\n?)*)$"

Check failure

Code scanning / CodeQL

Inefficient regular expression High

This part of the regular expression may cause exponential backtracking on strings starting with 'Types:\tURIs:!Suites:\nComponents:a' and containing many repetitions of '!:!'.
r"URIs:\s*(?P<uri>\S+)\s*"
r"Suites:\s*(?P<suite>.*)\n"
r"Components:\s*(?P<components>.+?)\s*"
r"(?P<options>((?:\S+:\s*.+)\n?)*)$"

Check failure

Code scanning / CodeQL

Inefficient regular expression High

This part of the regular expression may cause exponential backtracking on strings starting with 'Types:\tURIs:!Suites:\nComponents:a!:' and containing many repetitions of 'a!:'.
r"(?P<status>\S+):(?P<id>\d+)\s+(?P<uri>\S+)\s+(?P<name>\S+)"
r"\s+(?P<metadata>.*)\s*"
r"^(?P<type>deb(?:-src)?)\s+" # deb or deb-src
r"(?P<options>(?:\w+=\w+\s?)*)\s" # [option1=value1 ...]

Check failure

Code scanning / CodeQL

Inefficient regular expression High

This part of the regular expression may cause exponential backtracking on strings starting with 'deb\t0=' and containing many repetitions of '000='.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant