Search: unsupported feature

[darker008]

Describe the bug
A clear and concise description of what the bug is.

Reproduction steps
Steps to reproduce the behavior:

1. install scorecard a standalone
2. run scorecard with --local parameter

Expected behavior
A clear and concise description of what you expected to happen.
get score of all checks

however got '?' of dependency-update-tool and vulnerabilities.
it prompts Error: check runtime error: internal error: search: unsupported feature,

anyone can give suggestion?
thank you in advance

Additional context
Add any other context about the problem here.

[genos1998]

Is there a update on this one?
I too am facing the same issue

[spencerschrock]

Is there a update on this one? I too am facing the same issue

Is this specifically for the Dependency-Update-Tool? This is partially expected, but could be improved.

I believe Vulnerabilities check should be working now locally.

[pnacht]

This could be "fixed" by improving the error message to clarify that Dependency-Update-Tool doesn't work with --local (and why).

[spencerschrock]

This could be "fixed" by improving the error message to clarify that Dependency-Update-Tool doesn't work with --local (and why).

In this particular case, I think the answer is "don't worry about searching for commits" if the repo client doesn't have them.