Skip to content

feat(stackrox/stackrox/roxctl): add roxctl package#50093

Merged
suzuki-shunsuke merged 3 commits into
aquaproj:mainfrom
sebdanielsson:feat/stackrox/stackrox/roxctl
Mar 9, 2026
Merged

feat(stackrox/stackrox/roxctl): add roxctl package#50093
suzuki-shunsuke merged 3 commits into
aquaproj:mainfrom
sebdanielsson:feat/stackrox/stackrox/roxctl

Conversation

@sebdanielsson

@sebdanielsson sebdanielsson commented Mar 9, 2026

Copy link
Copy Markdown
Contributor

feat(stackrox/stackrox/roxctl): add roxctl package

Check List

Add stackrox's roxctl CLI tool.

Summary by CodeRabbit

  • New Features
    • Added support for the roxctl CLI with multi-version availability (including v4.4.0 through v4.10.0).
    • Enabled installation across Linux, macOS, and Windows with x86_64 and ARM64 support.
    • Added multiple download sources/mirror handling for version-specific distribution.
    • Implemented checksum verification for secure downloads.

feat(stackrox/stackrox/roxctl): add roxctl package

Signed-off-by: Sebastian Danielsson <sebastian.danielsson@proton.me>
@coderabbitai

coderabbitai Bot commented Mar 9, 2026

Copy link
Copy Markdown

Warning

Rate limit exceeded

@suzuki-shunsuke has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 22 minutes and 9 seconds before requesting another review.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 2a3a466d-06c4-4482-abbc-9097c1d8f139

📥 Commits

Reviewing files that changed from the base of the PR and between 15b67f7 and af56487.

📒 Files selected for processing (2)
  • pkgs/stackrox/stackrox/roxctl/registry.yaml
  • registry.yaml
📝 Walkthrough

Walkthrough

Adds three YAML registry/manifest files that declare the roxctl package and its HTTP distribution with two version-specific overrides, multi-OS/multi-arch targets, URL templates, and SHA256 checksum extraction.

Changes

Cohort / File(s) Summary
Package Manifest
pkgs/stackrox/stackrox/roxctl/pkg.yaml
New manifest listing roxctl package entries (including versions 4.10.0 and 4.4.0).
Package-specific registry
pkgs/stackrox/stackrox/roxctl/registry.yaml
New registry entry defining an HTTP distribution for stackrox/stackrox/roxctl with two version_override blocks, per-OS/arch file templates, URL templates pointing to RHACS mirrors and primary sources, and SHA256 checksum extraction via regex.
Global registry
registry.yaml
Adds corresponding HTTP source entry for stackrox/stackrox/roxctl with the same two version-specific overrides and platform/arch mappings.

Sequence Diagram(s)

(omitted)

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Poem

🐰 I dug a yaml hole today and found a key,
Two versions tucked beneath a registry tree.
Binaries for many lands, checksums snug and tight,
I hopped them into lists and kept the routes polite.
Hooray for roxctl — a rabbit's tidy spree!

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly describes the main change: adding the roxctl package from StackRox to the registry.
Description check ✅ Passed The description follows the template structure with a completed checklist covering all required items and a brief explanation of the change.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🧹 Nitpick comments (1)
pkgs/stackrox/stackrox/roxctl/pkg.yaml (1)

4-4: Remove unnecessary quotes from version value.

The quotes around "4.4.0" are unnecessary since it's a valid YAML scalar without them.

Suggested fix
 packages:
   - name: stackrox/stackrox/roxctl@4.10.0
   - name: stackrox/stackrox/roxctl
-    version: "4.4.0"
+    version: 4.4.0

As per coding guidelines: "Remove unnecessary quotes from string values."

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@pkgs/stackrox/stackrox/roxctl/pkg.yaml` at line 4, The YAML "version" scalar
currently includes unnecessary quotes ("4.4.0"); update the
pkgs/stackrox/stackrox/roxctl/pkg.yaml version key by replacing the quoted value
with an unquoted scalar (i.e., change version: "4.4.0" to version: 4.4.0) so the
YAML uses an unquoted string per the coding guidelines.
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Nitpick comments:
In `@pkgs/stackrox/stackrox/roxctl/pkg.yaml`:
- Line 4: The YAML "version" scalar currently includes unnecessary quotes
("4.4.0"); update the pkgs/stackrox/stackrox/roxctl/pkg.yaml version key by
replacing the quoted value with an unquoted scalar (i.e., change version:
"4.4.0" to version: 4.4.0) so the YAML uses an unquoted string per the coding
guidelines.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: e375dbad-404a-497c-ab88-fb24060aa4c5

📥 Commits

Reviewing files that changed from the base of the PR and between 4582344 and 6393e98.

📒 Files selected for processing (3)
  • pkgs/stackrox/stackrox/roxctl/pkg.yaml
  • pkgs/stackrox/stackrox/roxctl/registry.yaml
  • registry.yaml

@suzuki-shunsuke

Copy link
Copy Markdown
Member

@suzuki-shunsuke suzuki-shunsuke added the enhancement New feature or request label Mar 9, 2026
Comment on lines +14 to +15
files:
- name: roxctl

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
files:
- name: roxctl

It's unnecessary as the package name ends with /roxctl.

Comment on lines +16 to +19
supported_envs:
- linux/amd64
- darwin/amd64
- windows/amd64

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
supported_envs:
- linux/amd64
- darwin/amd64
- windows/amd64
rosetta2: true
windows_arm_emulation: true
supported_envs:
- amd64

Comment on lines +20 to +22
overrides:
- goos: windows
url: https://mirror.openshift.com/pub/rhacs/assets/{{.Version}}/bin/windows/roxctl.exe

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
overrides:
- goos: windows
url: https://mirror.openshift.com/pub/rhacs/assets/{{.Version}}/bin/windows/roxctl.exe

It's unnecessary. aqua appends .exe on Windows by default.

Comment on lines +34 to +35
files:
- name: roxctl

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
files:
- name: roxctl

Comment on lines +36 to +40
supported_envs:
- darwin
- linux/amd64
- linux/arm64
- windows/amd64

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
supported_envs:
- darwin
- linux/amd64
- linux/arm64
- windows/amd64
windows_arm_emulation: true

@suzuki-shunsuke suzuki-shunsuke added this to the v4.480.1 milestone Mar 9, 2026
@suzuki-shunsuke suzuki-shunsuke merged commit e722ec0 into aquaproj:main Mar 9, 2026
17 checks passed
@github-project-automation github-project-automation Bot moved this to Done in main Mar 9, 2026
tmeijn pushed a commit to tmeijn/dotfiles that referenced this pull request Mar 11, 2026
This MR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [aquaproj/aqua-registry](https://github.com/aquaproj/aqua-registry) | minor | `v4.476.0` → `v4.481.0` |

MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot).

**Proposed changes to behavior should be submitted there as MRs.**

---

### Release Notes

<details>
<summary>aquaproj/aqua-registry (aquaproj/aqua-registry)</summary>

### [`v4.481.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.481.0)

[Compare Source](aquaproj/aqua-registry@v4.480.0...v4.481.0)

[Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.481.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.481.0) | <aquaproj/aqua-registry@v4.480.0...v4.481.0>

#### 🎉 New Packages

[#&#8203;50135](aquaproj/aqua-registry#50135) [raaymax/lazytail](https://github.com/raaymax/lazytail): Log viewer for app development [@&#8203;hituzi-no-sippo](https://github.com/hituzi-no-sippo)
[#&#8203;50093](aquaproj/aqua-registry#50093) [stackrox/stackrox/roxctl](https://github.com/stackrox/stackrox) - CLI for StackRox Kubernetes Security Platform [@&#8203;sebdanielsson](https://github.com/sebdanielsson)

#### Improvement

[#&#8203;50136](aquaproj/aqua-registry#50136) hellux/jotdown: Add search words `djot` [@&#8203;hituzi-no-sippo](https://github.com/hituzi-no-sippo)
[#&#8203;50164](aquaproj/aqua-registry#50164) Use preferred signer\_workflow spelling [@&#8203;scop](https://github.com/scop)

#### Fixes

[#&#8203;50085](aquaproj/aqua-registry#50085) mvdan/sh: Starting v3.13.0, no longer includes a sha256sums.txt asset [@&#8203;adilsyed518](https://github.com/adilsyed518)

#### Security

Configure GitHub Immutable Release config by [@&#8203;scop](https://github.com/scop)

[#&#8203;50115](aquaproj/aqua-registry#50115) twpayne/chezmoi
[#&#8203;50114](aquaproj/aqua-registry#50114) suzuki-shunsuke/ghir
[#&#8203;50113](aquaproj/aqua-registry#50113) suzuki-shunsuke/cmdx
[#&#8203;50084](aquaproj/aqua-registry#50084) pnpm/pnpm
[#&#8203;50081](aquaproj/aqua-registry#50081) jdx/usage
[#&#8203;50077](aquaproj/aqua-registry#50077) jdx/mise
[#&#8203;50076](aquaproj/aqua-registry#50076) jdx/hk
[#&#8203;50075](aquaproj/aqua-registry#50075) j178/prek
[#&#8203;50074](aquaproj/aqua-registry#50074) dprint/dprint

### [`v4.480.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.480.0)

[Compare Source](aquaproj/aqua-registry@v4.479.0...v4.480.0)

[Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.480.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.480.0) | <aquaproj/aqua-registry@v4.479.0...v4.480.0>

#### 🎉 New Packages

[#&#8203;50019](aquaproj/aqua-registry#50019) [betterleaks/betterleaks](https://github.com/betterleaks/betterleaks): A Better Secrets Scanner built for configurability and speed [@&#8203;hituzi-no-sippo](https://github.com/hituzi-no-sippo)

#### Fixes

[#&#8203;50041](aquaproj/aqua-registry#50041) moonrepo/moon: Re-scaffold to support v2.0.0 or later
[#&#8203;50020](aquaproj/aqua-registry#50020) swanysimon/markdownlint-rs: Rename to swanysimon/mdlint

### [`v4.479.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.479.0)

[Compare Source](aquaproj/aqua-registry@v4.478.0...v4.479.0)

[Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.479.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.479.0) | <aquaproj/aqua-registry@v4.478.0...v4.479.0>

#### 🎉 New Packages

[#&#8203;49988](aquaproj/aqua-registry#49988) [princjef/gomarkdoc](https://github.com/princjef/gomarkdoc): Generate markdown documentation for Go (golang) code
[#&#8203;49970](aquaproj/aqua-registry#49970) [majorcontext/moat](https://github.com/majorcontext/moat) - Run agents in containers with credential injection and full observability [@&#8203;joonas](https://github.com/joonas)
[#&#8203;49969](aquaproj/aqua-registry#49969) [sudorandom/fauxrpc](https://github.com/sudorandom/fauxrpc) - Easily start a fake gRPC/gRPC-Web/Connect/REST server from protobufs [@&#8203;joonas](https://github.com/joonas)
[#&#8203;49947](aquaproj/aqua-registry#49947) [apache/ant](https://github.com/apache/ant) - Apache Ant is a Java library and command-line tool whose mission is to drive processes described in build files as targets and extension points dependent upon each other [@&#8203;chadlwilson](https://github.com/chadlwilson)

### [`v4.478.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.478.0)

[Compare Source](aquaproj/aqua-registry@v4.477.0...v4.478.0)

[Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.478.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.478.0) | <aquaproj/aqua-registry@v4.477.0...v4.478.0>

#### 🎉 New Packages

[#&#8203;49934](aquaproj/aqua-registry#49934) [suzuki-shunsuke/docfresh](https://github.com/suzuki-shunsuke/docfresh): Make document maintainable, reusable, and testable

#### Security

[#&#8203;49919](aquaproj/aqua-registry#49919) spinel-coop/rv: GitHub artifact attestations config [@&#8203;scop](https://github.com/scop)

#### Fixes

[#&#8203;49892](aquaproj/aqua-registry#49892) Re-scaffold cloudflare/cloudflared

### [`v4.477.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.477.0)

[Compare Source](aquaproj/aqua-registry@v4.476.0...v4.477.0)

[Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.477.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.477.0) | <aquaproj/aqua-registry@v4.476.0...v4.477.0>

#### 🎉 New Packages

[#&#8203;49856](aquaproj/aqua-registry#49856) [k1LoW/mo](https://github.com/k1LoW/mo): mo is a Markdown viewer that opens .md files in a browser
[#&#8203;49770](aquaproj/aqua-registry#49770) [#&#8203;49791](aquaproj/aqua-registry#49791) [rtk-ai/rtk](https://github.com/rtk-ai/rtk) - CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies [@&#8203;NikitaCOEUR](https://github.com/NikitaCOEUR) [@&#8203;TyceHerrman](https://github.com/TyceHerrman)
[#&#8203;49738](aquaproj/aqua-registry#49738) [yashikota/exiftool-go](https://github.com/yashikota/exiftool-go) - Pure Go ExifTool wrapper powered by WebAssembly [@&#8203;yashikota](https://github.com/yashikota)
[#&#8203;49610](aquaproj/aqua-registry#49610) [datadog-labs/pup](https://github.com/datadog-labs/pup) - Give your AI agent a Pup — a CLI companion with 200+ commands across 33+ Datadog products [@&#8203;iwata](https://github.com/iwata)
[#&#8203;49348](aquaproj/aqua-registry#49348) [huseyinbabal/taws](https://github.com/huseyinbabal/taws) - Terminal UI for AWS (taws) - A terminal-based AWS resource viewer and manager [@&#8203;TyceHerrman](https://github.com/TyceHerrman)

#### Security

[#&#8203;49707](aquaproj/aqua-registry#49707) owenlamont/ryl: GitHub artifact attestations config [@&#8203;scop](https://github.com/scop)
[#&#8203;49340](aquaproj/aqua-registry#49340) astral-sh/ruff: GitHub artifact attestations config [@&#8203;scop](https://github.com/scop)
[#&#8203;49344](aquaproj/aqua-registry#49344) rhysd/actionlint: GitHub artifact attestations config [@&#8203;scop](https://github.com/scop)
[#&#8203;49345](aquaproj/aqua-registry#49345) caarlos0/fork-cleaner: GitHub artifact attestations config [@&#8203;scop](https://github.com/scop)
[#&#8203;49418](aquaproj/aqua-registry#49418) block/goose: GitHub artifact attestations config [@&#8203;scop](https://github.com/scop)

#### Fixes

[#&#8203;49398](aquaproj/aqua-registry#49398) pre-commit/pre-commit: Exclude Windows from `supported_envs` [@&#8203;altendky](https://github.com/altendky)
[#&#8203;49613](aquaproj/aqua-registry#49613) Rename kunobi-ninja/kunobi-releases to kunobi-ninja/kunobi [@&#8203;rawmind0](https://github.com/rawmind0)
[#&#8203;49623](aquaproj/aqua-registry#49623) weaviate/weaviate: Remove hidden Unicode whitespace [@&#8203;jamietanna](https://github.com/jamietanna)
[#&#8203;49652](aquaproj/aqua-registry#49652) technicalpickles/envsense: Add linux/arm64 support [@&#8203;technicalpickles](https://github.com/technicalpickles)
[#&#8203;49753](aquaproj/aqua-registry#49753) mozilla/sccache): Support aarch64 [@&#8203;lahabana](https://github.com/lahabana)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this MR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box

---

This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41NS4zIiwidXBkYXRlZEluVmVyIjoiNDMuNjAuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiUmVub3ZhdGUgQm90IiwiYXV0b21hdGlvbjpib3QtYXV0aG9yZWQiLCJkZXBlbmRlbmN5LXR5cGU6Om1pbm9yIl19-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants