jadams-tresys commented on code in PR #48:
URL:
https://github.com/apache/daffodil-infrastructure/pull/48#discussion_r3760390400
##########
actions/release-candidate/dist/main/index.js:
##########
@@ -33019,6 +33019,13 @@ async function run() {
fs.appendFileSync(`${ sbt_dir }/plugins/build.sbt`,
'addSbtPlugin("com.github.sbt" %% "sbt-sbom" % "0.4.0")\n');
fs.appendFileSync(`${ sbt_dir }/build.sbt`, 'bomFormat :=
"xml"\n');
+ // download and install jsign for signing exe files, ignore
dependencies assuming that the
+ // workflow already has java installed or will install java at
some point
+ const jsign_version = "7.4";
+ const jsign_deb_path = `${ os.tmpdir()
}/jsign_${jsign_version}_all.deb`;
+ await exec("curl", ["-L", "-o", jsign_deb_path,
`https://github.com/ebourg/jsign/releases/download/${jsign_version}/jsign_${jsign_version}_all.deb`]);
+ await exec("sudo", ["dpkg", "--ignore-depends=ALL",
"--install", jsign_deb_path]);
Review Comment:
I take it it's not already in the standard debian/ubuntu repository?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
