Skip to main content

Find important upstream fixes

Project description

Build status PyPI version Python version Downloads

Purpose

This tool shall help identify commits in current source tree that are

  • available remote on the same branch

  • available in the parent branch

and are likely to contain bugfixes.

What it does

  • It extracts the currently used commit from the local repository clone

  • this can be overridden by specifying --srcrev or --srctag in command line

  • It extracts the currently used branch from the local repository clone

  • this can be overridden by specifying --srcbranch in command line

  • It gets all remote available commits in current branch

  • It gets all commits made to ‘master’ since current branch has been branched off (an alternative branch to ‘master’ can be specified by using --upstream in command line)

  • it filters all commits out, that might have been cherry-picked in current branch

  • all the remaining commits are classified regarding their commit message

  • commits that are classified to be likely bugfixes are presented at the console (STDOUT)

Usage

usage: ensurecsv [-h] [--srcbranch SRCBRANCH]
                 [--srcrev SRCREV | --srctag SRCTAG] [--upstream UPSTREAM]
                 localdir

Ensure that you're using the most security source code

positional arguments:
  localdir              Path to local repo

optional arguments:
  -h, --help            show this help message and exit
  --srcbranch SRCBRANCH
                        Use explicitly given branch
  --srcrev SRCREV       Use explicitly given source revision
  --srctag SRCTAG       Use explicitly given tag
  --upstream UPSTREAM   Use explicitly given branch as upstream

Installation

From source

  • git clone this repository

  • cd to <clone folder>/ensurecvs

  • Install the needed requirements by running pip3 install -r requirements.txt

  • run python3 setup.py build install (possibly ‘sudo’ is needed)

Output

The tool will return

[branch] commit <commit hash>:'<commit message>'  is likely to contain bugfixes

e.g.

[master] commit 173dfc1c07c9fa901a91adbc9bf8fd41961b9837:'Fix compile issue with python-astor' is likely to contain bugfixes

that means that commit 173dfc1c07c9fa901a91adbc9bf8fd41961b9837 currently to be found in branch master is likely to contain a bugfix that isn’t yet used in the currently selected branch

Implementation notes

Currently only git-repositories are supported

Future

If you have interest in one or more of the following topics, feel free to get in contact with me

  • better commit classification (maybe with something like this here)

  • better documentation

  • changeset code analysis for better commit classification

  • compare the changeset diff for cherry-pick analysis

  • streamline code

  • svn-repository support

Contribution

Feel free to add issues or pull requests

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

ensurecvs-1.0.1.tar.gz (6.3 kB view hashes)

Uploaded Source

Built Distributions

ensurecvs-1.0.1-py3.7.egg (17.4 kB view hashes)

Uploaded Source

ensurecvs-1.0.1-py3.6.egg (16.6 kB view hashes)

Uploaded Source

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page