stevedlawrence commented on code in PR #48:
URL:
https://github.com/apache/daffodil-infrastructure/pull/48#discussion_r3760433643
##########
actions/release-candidate/dist/main/index.js:
##########
@@ -33019,6 +33019,13 @@ async function run() {
fs.appendFileSync(`${ sbt_dir }/plugins/build.sbt`,
'addSbtPlugin("com.github.sbt" %% "sbt-sbom" % "0.4.0")\n');
fs.appendFileSync(`${ sbt_dir }/build.sbt`, 'bomFormat :=
"xml"\n');
+ // download and install jsign for signing exe files, ignore
dependencies assuming that the
+ // workflow already has java installed or will install java at
some point
+ const jsign_version = "7.4";
+ const jsign_deb_path = `${ os.tmpdir()
}/jsign_${jsign_version}_all.deb`;
+ await exec("curl", ["-L", "-o", jsign_deb_path,
`https://github.com/ebourg/jsign/releases/download/${jsign_version}/jsign_${jsign_version}_all.deb`]);
+ await exec("sudo", ["dpkg", "--ignore-depends=ALL",
"--install", jsign_deb_path]);
Review Comment:
I don't think so, and I don't think it's available via a third party repo
either. GitHub seems to be the only place to get official .debs.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
