Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable the "missing old self signature" lint. #54

Merged
merged 1 commit into from
Aug 29, 2023

Conversation

nwalfield
Copy link
Collaborator

  • Unfortunately, gpg --export only includes the newest self signature for each component. To accomodate this, we allow the use of the current self signature when verifying a data signature even if the current self signature was created after the data signature was created.

  • Emitting a lint here doesn't help much as for most users it is not actionable. Further, the lint generates a lot of noise (a lint for every verification).

  • Disable the lint.

  - Unfortunately, `gpg --export` only includes the newest self
    signature for each component.  To accomodate this, we allow the
    use of the current self signature when verifying a data signature
    even if the current self signature was created after the data
    signature was created.

  - Emitting a lint here doesn't help much as for most users it is
    not actionable.  Further, the lint generates a lot of noise (a
    lint for every verification).

  - Disable the lint.
@github-actions
Copy link

Triggered from #54 by @nwalfield.

Checking if we can fast forward main (6f1127f) to neal/disable-lint (b410b5a).

Target branch (main):

commit 6f1127f6edb976d4aa1057a8e6d48e4d42053aa8 (HEAD -> main, origin/main, origin/HEAD)
Author: Neal H. Walfield <[email protected]>
Date:   Mon Aug 28 13:07:56 2023 +0200

    Improve README.

Pull request (neal/disable-lint):

commit b410b5aeaf271c39beaba5b0fd9e207c9808f88d (pull_request/neal/disable-lint)
Author: Neal H. Walfield <[email protected]>
Date:   Tue Aug 29 11:11:25 2023 +0200

    Disable the "missing old self signature" lint.
    
      - Unfortunately, `gpg --export` only includes the newest self
        signature for each component.  To accomodate this, we allow the
        use of the current self signature when verifying a data signature
        even if the current self signature was created after the data
        signature was created.
    
      - Emitting a lint here doesn't help much as for most users it is
        not actionable.  Further, the lint generates a lot of noise (a
        lint for every verification).
    
      - Disable the lint.

It is possible to fast forward main (6f1127f) to neal/disable-lint (b410b5a). If you have write access to the target repository, you can add a comment with /fast-forward to fast forward main to neal/disable-lint.

@nwalfield
Copy link
Collaborator Author

/fast-forward

@github-actions
Copy link

Triggered from #54 (comment) by @nwalfield.

Trying to fast forward main (6f1127f) to neal/disable-lint (b410b5a).

Target branch (main):

commit 6f1127f6edb976d4aa1057a8e6d48e4d42053aa8 (HEAD -> main, origin/main, origin/HEAD)
Author: Neal H. Walfield <[email protected]>
Date:   Mon Aug 28 13:07:56 2023 +0200

    Improve README.

Pull request (neal/disable-lint):

commit b410b5aeaf271c39beaba5b0fd9e207c9808f88d (pull_request/neal/disable-lint)
Author: Neal H. Walfield <[email protected]>
Date:   Tue Aug 29 11:11:25 2023 +0200

    Disable the "missing old self signature" lint.
    
      - Unfortunately, `gpg --export` only includes the newest self
        signature for each component.  To accomodate this, we allow the
        use of the current self signature when verifying a data signature
        even if the current self signature was created after the data
        signature was created.
    
      - Emitting a lint here doesn't help much as for most users it is
        not actionable.  Further, the lint generates a lot of noise (a
        lint for every verification).
    
      - Disable the lint.

Fast forwarding main (6f1127f) to neal/disable-lint (b410b5a).

$ git push origin b410b5aeaf271c39beaba5b0fd9e207c9808f88d:main
To https://github.com/rpm-software-management/rpm-sequoia.git
   6f1127f..b410b5a  b410b5aeaf271c39beaba5b0fd9e207c9808f88d -> main

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant