README
¶
CDPRun
CDPRun is a tool for downloading and managing runtime binaries like Node.js, Python, and more. It is designed to be a single tool that can be used to download and manage runtime binaries for a variety of languages and frameworks.
Why CDPRun?
We wanted a tool that will provide us a unified way to download and manage runtime binaries with security attestation and we wanted a way to download via nexus proxy repository without having to download the binaries from the internet.
How it works?
CDPRun will download these binaries based on a policy file and publish them as a GitHub Release.
It uses endoflife.date API to get the latest version of the runtime and download the binaries from the internet.
It verifies the integrity of the downloaded binaries using a checksum file , gpg signature and clamav malware scanning.
There is a static website generated which uses the GitHub Release as a source of truth.
Is it production ready?
It is still Work in Progress
Directories
¶
| Path | Synopsis |
|---|---|
|
cmd
|
|
|
runtime-cli
command
Package main provides the unified runtime CLI application.
|
Package main provides the unified runtime CLI application. |
|
sitegen
command
Package main provides the sitegen CLI command for generating static HTML sites from release database.
|
Package main provides the sitegen CLI command for generating static HTML sites from release database. |
|
internal
|
|
|
clamav
Package clamav provides malware scanning using ClamAV in Docker containers.
|
Package clamav provides malware scanning using ClamAV in Docker containers. |
|
cli
Package cli provides a unified command-line interface for the runtime download system.
|
Package cli provides a unified command-line interface for the runtime download system. |
|
config
Package config provides configuration management for the unified runtime download system.
|
Package config provides configuration management for the unified runtime download system. |
|
endoflife
Package endoflife provides integration with the endoflife.date API for retrieving runtime version information and lifecycle data.
|
Package endoflife provides integration with the endoflife.date API for retrieving runtime version information and lifecycle data. |
|
github
Package github provides a client for interacting with GitHub Releases API.
|
Package github provides a client for interacting with GitHub Releases API. |
|
runtime
Package runtime provides the core abstraction layer for the unified runtime download system.
|
Package runtime provides the core abstraction layer for the unified runtime download system. |
|
runtimes/nodejs
Package nodejs provides a Node.js runtime adapter for the unified runtime download system.
|
Package nodejs provides a Node.js runtime adapter for the unified runtime download system. |
|
runtimes/python
Package python provides a Python runtime adapter for the unified runtime download system.
|
Package python provides a Python runtime adapter for the unified runtime download system. |
|
runtimes/temurin
Package temurin provides the Temurin (Eclipse Adoptium) runtime adapter for the unified runtime download system.
|
Package temurin provides the Temurin (Eclipse Adoptium) runtime adapter for the unified runtime download system. |
|
runtimes/vscode
Package vscode provides a VSCode runtime adapter for the unified runtime download system.
|
Package vscode provides a VSCode runtime adapter for the unified runtime download system. |
|
runtimes/yarn
Package yarn provides a Yarn Classic runtime adapter for the unified runtime download system.
|
Package yarn provides a Yarn Classic runtime adapter for the unified runtime download system. |
|
sitegen
Package sitegen generates static HTML pages from release database for GitHub Pages.
|
Package sitegen generates static HTML pages from release database for GitHub Pages. |
|
sitegen/testserver
command
|
|
|
storage
Package storage provides database operations for release tracking.
|
Package storage provides database operations for release tracking. |
|
version
Package version provides semantic version validation and pattern matching
|
Package version provides semantic version validation and pattern matching |
|
lineaje-sbom
module
|