Subject: [PATCH 0/1] sources.json compliant with SWH loader
From: zimoun <[email-masked]>
To: [email-masked]
Cc: zimoun <[email-masked]>
Date: Tue, 23 Jun 2020 17:13:23 +0200
List-Id: <debbugs-submit.debbugs.gnu.org>

Dear,

This patch adds the "integrity" field.  It is SRI format i.e., 'origin-hash'
is converted to 'base64'.

The "revision" field is the Guix commit.  It should be used by SWH; for example
SWH could fetch several sources.json.

Currently, the SWH loader does only support the formats [1]
".tar.gz$|.zip$|tar.bz2$|.tbz$|.tar.xz$|.tgz$|.tar$" and their advice is
to filter out any other files (e.g., Gem).  For now, there is no filter and
it could be added then if it is really an issue for them.

1: https://forge.softwareheritage.org/T1352#45459

All the best,
simon

zimoun (1):
  website: Add integrity to JSON sources.

 website/apps/packages/builder.scm | 25 ++++++++++++++++++++-----
 1 file changed, 20 insertions(+), 5 deletions(-)

base-commit: 36fdde5b3efad445291588a5bc17a11802eb7ff8
-- 
2.26.2