Skip to content

feat: filter organization dependencies by purl - #1610

Open
John-David Dalton (jdalton) wants to merge 1 commit into
v1.xfrom
docs/organization-dependencies-v1x
Open

John-David Dalton (jdalton) wants to merge 1 commit into
v1.xfrom
docs/organization-dependencies-v1x

Conversation

@jdalton

@jdalton John-David Dalton (jdalton) commented Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

Find specific packages in your organization’s stored dependencies with repeatable --purls filters.

Validate and deduplicate filters before sending them. Display results only when the server confirms every requested filter.

Add unit tests for parsing and server confirmation, CLI tests for valid and invalid filters, and a guide covering filtering, pagination, and JSON output.

@cursor

This comment was marked as outdated.

@jdalton
John-David Dalton (jdalton) force-pushed the docs/organization-dependencies-v1x branch from c511a4d to 6c6e5f5 Compare October 12, 2026 16:07
@jdalton
John-David Dalton (jdalton) changed the base branch from main to v1.x October 12, 2026 16:07
@jdalton
John-David Dalton (jdalton) force-pushed the docs/organization-dependencies-v1x branch from 6c6e5f5 to 61e8a8f Compare October 12, 2026 16:09
@jdalton
John-David Dalton (jdalton) force-pushed the docs/organization-dependencies-v1x branch from 61e8a8f to be04e96 Compare October 27, 2026 20:38
@jdalton
John-David Dalton (jdalton) force-pushed the docs/organization-dependencies-v1x branch 5 times, most recently from 8d4cd99 to cc8ba0a Compare November 11, 2026 16:39
@jdalton John-David Dalton (jdalton) changed the title docs: explain organization dependency inventory feat: filter organization dependencies by purl Nov 12, 2026
@jdalton

Copy link
Copy Markdown
Contributor Author

Cursor (@cursor) review

@cursor

cursor Bot commented Nov 12, 2026 •

Copy link
Copy Markdown

PR Summary

Low Risk
Scoped CLI feature with validation and tests; no auth or data-path changes beyond optional API filter parameters.

Overview
Adds repeatable --purls filters to socket organization dependencies so org dependency inventory can be narrowed to specific packages (full PURLs, version optional). --offset help text is clarified to “number of dependencies to skip” instead of “page number”.

Filter values are parsed, trimmed, deduplicated, and validated before the API call (rejects bare names, empty flags, qualifiers, and subpaths). When filters are used, the CLI only shows results if the API’s purlFilters confirms every requested PURL; otherwise it fails with a clear error and no rows.

New docs/organization-dependencies.md (linked from the README) documents pagination and PURL filtering. Unit and CLI tests cover parsing, server confirmation, and invalid --purls usage.

Reviewed by Cursor Bugbot for commit cc8ba0a. Configure here.

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

Reviewed by Cursor Bugbot for commit cc8ba0a. Configure here.

@jdalton
John-David Dalton (jdalton) force-pushed the docs/organization-dependencies-v1x branch 2 times, most recently from 74548c9 to 99e6cd1 Compare November 12, 2026 15:27
@jdalton
John-David Dalton (jdalton) force-pushed the docs/organization-dependencies-v1x branch from 99e6cd1 to 513c398 Compare November 12, 2026 15:49
@jdalton
John-David Dalton (jdalton) force-pushed the docs/organization-dependencies-v1x branch from 513c398 to 5757c81 Compare November 12, 2026 15:53

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant