https://bugzilla.redhat.com/show_bug.cgi?id=1002166



--- Comment #4 from Gerard Ryan <ger...@ryan.lt> ---
(In reply to gil cattaneo from comment #3)
> (In reply to Gerard Ryan from comment #2)
> > I'm not sure if the new Github "releases" feature makes it unnecessary (not
> > sure how it works), but consider using the full commit hash to refer to the
> > sources, as advised here, for immutability and uniqueness:
> > 
> > https://fedoraproject.org/wiki/Packaging:SourceURL#Github
> 
> These advices should be used for those repository which don't used newer
> Git(hub) features.
> For immutability and uniqueness of the source archive, should be more than
> enough to use the available archives in
> 
> https://github.com/carrotsearch/junit-benchmarks/releases
> or
> ​https://github.com/$OWNER/$PROJECT/releases (instead of
> ​https://github.com/$OWNER/$PROJECT/tags)

Ah yeah, I had a feeling that that might be the case but wasn't sure.
fedora-review+ btw. Thanks for packaging! :)

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are always notified about changes to this product and component
_______________________________________________
package-review mailing list
package-review@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-review

Reply via email to