diff options
| author | Levente Polyak <anthraxx@archlinux.org> | 2019-09-13 21:17:20 +0200 |
|---|---|---|
| committer | Levente Polyak <anthraxx@archlinux.org> | 2019-09-28 00:16:04 +0200 |
| commit | fd6e801cfb0910c00a789c6b3f17461d8610c99b (patch) | |
| tree | 72bb30fb74dcd634ac79baa1a7e26eecc056cfa9 /lib/valid-repos.sh | |
| parent | a3868cf5423d68a3614020376840a67da3a6f0d4 (diff) | |
| download | devtools-fd6e801cfb0910c00a789c6b3f17461d8610c99b.tar.gz devtools-fd6e801cfb0910c00a789c6b3f17461d8610c99b.tar.xz | |
commitpkg: disallow if PKGBUILD hash mismatches package's enclosed hash
Several cases showed that we release packages that were built with
different PKGBUILDs than the one commited to the source tree. This is
bad for obvious reasons plus sploils reproducible builds.
We, under no circumstances, want to allow using commitpkg to publish and
release a packages whose PKGBUILD doesn't match the one to be commited.
Signed-off-by: Levente Polyak <anthraxx@archlinux.org>
Diffstat (limited to 'lib/valid-repos.sh')
0 files changed, 0 insertions, 0 deletions