epugh commented on PR #205:
URL: https://github.com/apache/solr-site/pull/205#issuecomment-5011005864

   In this case Copilot is missing some key context that lives in #204 where we 
actually have custom mapping files to expand out all the variations.  The 
specific "jar" is a label, but isn't what powers the vex mappings.   I still 
have to figure out a better way of mapping individual jars for specific 
releases.  We don't have a SBOM to use, and it may end up being somehow pulled 
from lockfiles..   Not sure.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to