I have strong suspicion that running opengrep is still not stable

We currently have this bazel/python/crazy-mix script for copyright. We should be using reuse. I'm not so sure adding another tool to the mix is a good idea.

We currently have this bazel/python/crazy-mix script for copyright. We should be using reuse. I'm not so sure adding another tool to the mix is a good idea.

To me it looks quite heavy to introduce bazel just for this to this repo. bazel will likely never be used here to build anything

We currently have this bazel/python/crazy-mix script for copyright. We should be using reuse. I'm not so sure adding another tool to the mix is a good idea.

To me it looks quite heavy to introduce bazel just for this to this repo. bazel will likely never be used here to build anything

I think as well... using Bazel to build devcontainers is really not a good idea.

We currently have this bazel/python/crazy-mix script for copyright. We should be using reuse. I'm not so sure adding another tool to the mix is a good idea.

There you can see how the same with bazel would look like: elektrobit-contrib#2

However I have to quote a very wise man

Some repos simply do not use bazel. In general tools should not run via bazel (see DR-001).

#79 is the same with bazel instead of opengrep

I wasn't proposing to add bazel, oh my god 😆

I guess we'll use reuse in the future. So this could be like an intermediate step before we adapt reuse. That's what I meant with yet another tool in the mix. Sooner or later we'll probably replace it.

However I have to quote a very wise man

Some repos simply do not use bazel. In general tools should not run via bazel (see DR-001).

👍