Correct. The downloads scanner scans the download server only.
We have no currently plans to extend it to scan repo.eclipse.org, so
we're counting on committers being careful to not push unapproved
third-party libraries there.
Please do open a bug, though. Perhaps there are other means to prevent
unapproved libraries from being pushed there in the first place (rather
than checking after the fact).
Wayne
On 09/02/15 03:13 PM, Matthias Sohn wrote:
On Mon, Feb 9, 2015 at 7:30 PM, Wayne Beaton <[email protected]
<mailto:[email protected]>> wrote:
Greetings. *If your project is participating in Mars, please read
this entire message.*
The *February 13th deadline for Mars CQs* is this week. Get your
Mars CQs in. Be sure to add a comment with a request for Mars
prioritization.
*You need a CQ for every version of a library you use.* Check your
builds; if you've pulled in a new version of a library, you may
need a CQ for it.
The download scanner [1] may be of some help. Please heed the
warnings provided by the tool: it is intended to provide
assistance, but is limited in what it can do. Don't panic if you
see a lot of red; it has a hard time sorting out non-bundle JAR
files and so reports many false positives (some older projects
will see this if they include straight-up JAR files in bundle
directories; the Ant bundles are a good example of this). If you
are concerned about what you see in the report: (1) don't panic;
(2) ask me for assistance.
it looks like the scanner doesn't scan release artifacts in
repo.eclipse.org <http://repo.eclipse.org>, maybe it should ?
-Matthias
_______________________________________________
cross-project-issues-dev mailing list
[email protected]
To change your delivery options, retrieve your password, or unsubscribe from
this list, visit
https://dev.eclipse.org/mailman/listinfo/cross-project-issues-dev
--
Wayne Beaton
@waynebeaton
The Eclipse Foundation
EclipseCon 2015 <http://www.eclipsecon.org/na2015>
_______________________________________________
cross-project-issues-dev mailing list
[email protected]
To change your delivery options, retrieve your password, or unsubscribe from
this list, visit
https://dev.eclipse.org/mailman/listinfo/cross-project-issues-dev
