tuhaihe opened a new pull request, #161: URL: https://github.com/apache/cloudberry-pxf/pull/161
## What Extend the workflow's binary-file detection (in `.github/workflows/apache-rat-audit.yml`) from 10 to 14 extensions by adding `deb`, `rpm`, `gppkg` and `bin`. Also prune build-output directories (`.git`, `target`, `build`, `.gradle`) from the `find` so build artifacts cannot trip the check. ## Why - Apache RAT does not recognize `deb`, `rpm`, `gppkg`, `bin` (nor `tgz`) in its archive/binary guessers. - For the formats RAT does recognize (jar, gz, zip, tar, exe, dll, so, class, \u2026), RAT only classifies them as BINARY and skips license analysis; it does **not** fail the build. The workflow `find` loop is the only mechanism that actually blocks binaries in the source tree. - The new `bin` detection can match gradle's `last-build.bin` cache file if a build ever runs before this step, hence the prune. ## Verification - Simulated the detection loop locally against the full 14-extension list: 0 violations, all 6 allowlisted test fixtures match. - YAML parses cleanly. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
