Function update_cmd

ggshield/cmd/plugin/update.py:89–461

Update installed plugins. Check for available updates: ggshield plugin update --check Update a specific plugin: ggshield plugin update tokenscanner Update all installed plugins: ggshield plugin update --all Note: Only plugins from GitGuardian API a

(
    ctx: click.Context,
    plugin_name: Optional[str],
    update_all: bool,
    check_only: bool,
    allow_unsigned: bool,
    **kwargs: Any,
)

@add_common_options()
@click.pass_context
def update_cmd(
    ctx: click.Context,
    plugin_name: Optional[str],
    update_all: bool,
    check_only: bool,
    allow_unsigned: bool,
    **kwargs: Any,
) -> None:
    """
    Update installed plugins.

    Check for available updates:

        ggshield plugin update --check

    Update a specific plugin:

        ggshield plugin update tokenscanner

    Update all installed plugins:

        ggshield plugin update --all

    Note: Only plugins from GitGuardian API and GitHub releases can be auto-updated.
    Plugins installed from local files or GitHub artifacts cannot be auto-updated.
    """
    if not plugin_name and not update_all and not check_only:
        ui.display_error("Please specify a plugin name, use --all, or use --check")
        ui.display_info("Usage: ggshield plugin update <plugin_name>")
        ui.display_info("       ggshield plugin update --all")
        ui.display_info("       ggshield plugin update --check")
        ctx.exit(ExitCode.USAGE_ERROR)

    ctx_obj = ContextObj.get(ctx)
    config = ctx_obj.config

    # Signature verification is strict by default. The only override is the
    # explicit per-command --allow-unsigned flag.
    enterprise_config = EnterpriseConfig.load()
    signature_mode = (
        SignatureVerificationMode.WARN
        if allow_unsigned
        else SignatureVerificationMode.STRICT
    )
    loader = PluginLoader(enterprise_config)
    downloader = PluginDownloader()

    installed_plugins = {p.name: p for p in loader.discover_plugins() if p.is_installed}

    # Determine which plugins to check/update
    if update_all or check_only:
        plugins_to_process = list(installed_plugins.keys())
    else:
        if plugin_name not in installed_plugins:
            ui.display_error(f"Plugin '{plugin_name}' is not installed")
            ui.display_info("Use 'ggshield plugin list' to see installed plugins")
            ctx.exit(ExitCode.USAGE_ERROR)
        plugins_to_process = [plugin_name]