Source: dgit
Version: 11.8
Severity: important

Dear maintainer,

As discussed elsewhere, we want source= and version= tags in the
tag2upload metadata to prevent the possibility of a certain form of
attack by someone who is able to replace git objects on salsa.

-- 
Sean Whitton

Attachment: signature.asc
Description: PGP signature

Reply via email to