Skip to content

Conversation

@smoser
Copy link
Contributor

@smoser smoser commented Oct 17, 2025

shell-deps parses shell scripts and determines dependencies.
See README.md for more info.

I was looking at using this for airflow-3.
All the updates that we would have had are not necessary against
the upstream constraints file.

I'd like to leave the '- uses: py/tw/bump-constraints'
and 'packages:' in the file, but doing so makes bump-constraints
complain that there are no updates.
@smoser
Copy link
Contributor Author

smoser commented Oct 17, 2025

This is untested other than what claude did.
I did not sanity check the output.

The idea is just to be able to identify dependencies of a shell script that are missing.

Ideally, I'd ultimately like to be able to point it at a image and have it spit out things that it thinks are missing.

$ tw  shell-deps scan-image cgr.dev/chainguard/my-image:latest

Right now it only handles local files or directory tree.

@smoser smoser requested review from kranurag7 and rawlingsj October 17, 2025 21:31
This is a pattern I often use to execute a functions
parameters after logging them.
Copy link
Contributor

@kranurag7 kranurag7 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

sorry for coming late on this, great work Scott

It would be awesome to have scan supported on files and directories both then we can do things like fd -e sh -x tw shell-deps scan

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants