Support disabling Lazy Install for security and governance

[suzuki-shunsuke]

Feature Overview

Support disabling Lazy Install for security.
If Lazy Install is disabled, the command would fail if the package isn't installed in advance.

Why is the feature needed?

To improve the security and keep the governance.
The purpose is same with aqua's Policy, but this is simpler than Policy.

This feature prevents malicious commands from being installed and executed.

This is especially useful for CI of Monorepo.

Does the feature include Breaking Changes?

No.

Example Code

export AQUA_DISABLE_LAZY_INSTALL=true

Reference

aqua/pkg/controller/exec/exec.go

Lines 126 to 133 in 8e75737

	if err := ctrl.packageInstaller.InstallPackage(ctx, logE, &installpackage.ParamInstallPackage{
	Pkg: findResult.Package,
	Checksums: checksums,
	RequireChecksum: findResult.Config.RequireChecksum(ctrl.requireChecksum),
	PolicyConfigs: policies,
	}); err != nil {
	return err //nolint:wrapcheck
	}

[suzuki-shunsuke]

• feat: support disabling Lazy Install #2063
• disable lazy install aquaproj.github.io#443

[suzuki-shunsuke]

aqua v2.9.0 is out 🎉
https://github.com/aquaproj/aqua/releases/tag/v2.9.0

• feat: support disabling Lazy Install #2063
• disable lazy install aquaproj.github.io#443