warrensbox/hubapp

The `hubapp` command line tool lets you install app binaries from github user's releases.

hubapp's Issues

Allow custom installation path

Hi,

I really like the tool, really nice work done here.

Can you implement custom installation paths? there are times when you can't use /use/local/bin because it requires root.

Regards,
Julio

Symlink error

2019/02/08 13:18:47 Creating directory for application: /Users/vkhans4/.aws-runas/
Downloading https://github.com/mmmorris1975/aws-runas/releases/download/1.1.1/aws-runas-1.1.1-darwin-amd64 to aws-runas-1.1.1-darwin-amd64
Downloading ...
15846412 bytes downloaded.
symlink /Users/vkhans4/.aws-runas/aws-runas_1.1.1 /usr/local/bin/aws-runas: file exists
2019/02/08 13:19:01 Unable to create symlink. You must have SUDO privileges to /usr/local/bin/%s directory 

Architecture Detection Aliases

While attempting to use hubapp, it does not match on an alternate naming pattern although the binaries can be installed. I experience this on a linux/amd64 client with projects like goreleaser and other projects that leverage it https://github.com/goreleaser/goreleaser/releases/tag/v0.140.0 In the link the tar.gz is identified by "x86_64" rather than "amd64" which is returned by runtime.goos in the install file. https://github.com/open-policy-agent/conftest/releases/tag/v0.20.0 is another example. Happy to contribute a fix, but wanted to check if you had a specific way you wanted to approach this.

同学，您这个项目引入了35个开源组件，存在1个漏洞，辛苦升级一下

检测到 warrensbox/hubapp 一共引入了35个开源组件，存在1个漏洞

漏洞标题：go-yaml < 2.2.8拒绝服务漏洞
缺陷组件：gopkg.in/[email protected]
漏洞编号：CVE-2019-11254
漏洞描述：gopkg.in/yaml.v2是go语言中用于处理yaml格式的包。
在2.2.8之前的版本中，处理恶意的yaml数据时，会导致CPU资源耗尽。
漏洞由Kubernetes开发者在fuzz测试中发现并提交修复补丁。
国家漏洞库信息：https://www.cnvd.org.cn/flaw/show/CNVD-2020-35519
影响范围：(∞, 2.2.8)
最小修复版本：2.2.8
缺陷组件引入路径：github.com/warrensbox/hubapp@->gopkg.in/[email protected]

另外还有几个漏洞，详细报告：https://mofeisec.com/jr?p=a0487a

Not unzipping correctly when using install

Hi Warren,

Just noticed this trying to install 3.x versions of aws-runas using hubapp. It downloads correctly but the resulting file wasn't extracted by hubapp and looks like it's still a zip file. Did the archive format of the thing we're trying to download change? Maybe it was tgz before and they've changed it to zip?

aws-runas --version
bash: /usr/local/bin/aws-runas: cannot execute binary file: Exec format error

ls -l /usr/local/bin/aws-runas
lrwxr-xr-x 40 bishbr 29 Jun 10:50 /usr/local/bin/aws-runas -> /Users/bishbr/.aws-runas/aws-runas_3.0.3*

file ~/.aws-runas/aws-runas_3.0.3 
/Users/bishbr/.aws-runas/aws-runas_3.0.3: Zip archive data, at least v2.0 to extract

unzip -tv ~/.aws-runas/aws-runas_3.0.3 
Archive:  /Users/bishbr/.aws-runas/aws-runas_3.0.3
    testing: aws-runas                OK
No errors detected in compressed data of /Users/bishbr/.aws-runas/aws-runas_3.0.3.