# foxglove

Foxglove is named after [@benburton](https://github.com/benburton)'s cat, Foxglove. It scans for security vulnerabilities like she scans his apartment for mice, probably. Foxglove also helps with your PR(rrrr)s.

## Getting Started

If you just want the Foxglove binary, and you don't want to work on development for the project, you will still need to have the [Bun](https://bun.sh/) runtime installed. Then you can run the install script that just drops into `~/.foxglove`. Read the [install script](./install.sh) if you want to see what it's up to.

```sh
curl -fsSL https://bun.sh/install | bash
git clone git@github.com:theorchard/collab.git
cd collab/bburton/foxglove
bun install
bun foxglove install
```

## Basic Usage

Use the `--help` argument to get help on basic usage.

```sh
$ foxglove --help
              _____              _
  ／l、       |  ___|____  ____ _| | _____   _____
（ﾟ､ ｡ ７      | |_ / _ \ \/ / _` | |/ _ \ \ / / _ \
  l  ~ヽ      |  _| (_) >  < (_| | | (_) \ V /  __/
  じしf_,)ノ   |_|  \___/_/\_\__, |_|\___/ \_/ \___|
                             |___/

Usage: foxglove [options] [command]
```

There's more information on the commands when you run this locally.

## Development

See [CONTRIBUTING](./CONTRIBUTING.md).

```sh
bun install
bun foxglove local
```

## Build

```sh
bun compile
```

### References

https://github.com/search?q=org%3Atheorchard+%22retest+this+please+skip+vulnerability+scan%22+in%3Acomments+is%3Apr+&type=pullrequests

````js
// await github.addPullRequestComment({ ...params, number: 49, body: "Hello" });
// await github.createCommitStatus({
// ...params,
// sha: "73b1eee9204bee346571ffcb26c4e73e150100ad",
// state: "success",
// buildUrl: "https://example.com",
// context: "GitHub-Vulnerability-Scanner-build",
// description: "Jenkins Build of GitHub Vulnerability Scanner",
// });
```
````

### Repo stuff

- `ows-carveouts` is missing `composer.lock`\
- `ows-metadata` is missing `composer.lock`