Sean Whitton writes ("Bug#1069001: dgit: tag2upload: [dgit ...] should include
source= and version= fields"):
> As discussed elsewhere, we want source= and version= tags in the
> tag2upload metadata to prevent the possibility of a certain form of
> attack by someone who is able to replace git objects on salsa.
It should include the target suite too. Then it specifies everything
except the tree contents.
Ian.
--
Ian Jackson <ijack...@chiark.greenend.org.uk> These opinions are my own.
Pronouns: they/he. If I emailed you from @fyvzl.net or @evade.org.uk,
that is a private address which bypasses my fierce spamfilter.
