GNU bug report logs -
#42019
[PATCH 0/1] sources.json compliant with SWH loader
Previous Next
Reported by: zimoun <zimon.toutoune <at> gmail.com>
Date: Tue, 23 Jun 2020 15:14:01 UTC
Severity: normal
Tags: patch
Done: Ludovic Courtès <ludo <at> gnu.org>
Bug is archived. No further changes may be made.
Full log
View this message in rfc822 format
Dear,
This patch adds the "integrity" field. It is SRI format i.e., 'origin-hash'
is converted to 'base64'.
The "revision" field is the Guix commit. It should be used by SWH; for example
SWH could fetch several sources.json.
Currently, the SWH loader does only support the formats [1]
".tar.gz$|.zip$|tar.bz2$|.tbz$|.tar.xz$|.tgz$|.tar$" and their advice is
to filter out any other files (e.g., Gem). For now, there is no filter and
it could be added then if it is really an issue for them.
1: https://forge.softwareheritage.org/T1352#45459
All the best,
simon
zimoun (1):
website: Add integrity to JSON sources.
website/apps/packages/builder.scm | 25 ++++++++++++++++++++-----
1 file changed, 20 insertions(+), 5 deletions(-)
base-commit: 36fdde5b3efad445291588a5bc17a11802eb7ff8
--
2.26.2
This bug report was last modified 4 years and 320 days ago.
Previous Next
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson.