Hi Matt. Thanks for the spending the time on verification. This is a false positive. If you inspect the file at the given path it should be evident that it’s a bash script and not a binary. There’s an open feature request to enhance the binary scanning in rcverify.
-r > On Apr 7, 2019, at 1:01 PM, Matt Sicker <[email protected]> wrote: > > Output from rcverify.sh: > > scanning for binaries... failed > (/var/folders/kv/8jx_1xhx50l86vzzmzhltd2c0000gn/T/tmp.xNrnFc0z/incubator-openwhisk-runtime-go-1.13.0-incubating/openwhisk/_test/pysample/exec) > >> On Sun, 7 Apr 2019 at 08:28, Rodric Rabbah <[email protected]> wrote: >> >> Hi, >> >> This is a call to vote on releasing version 1.13.0-incubating release >> candidate rc2 of the following project module with artifacts >> built from the Git repositories and commit IDs listed below. >> >> * OpenWhisk Runtime Go: ddd329946c1d061f256a274d6ccd23e527760e06 >> >> https://github.com/apache/incubator-openwhisk-runtime-go.git/commits/ddd329946c1d061f256a274d6ccd23e527760e06 >> >> This release is comprised of source code distribution only. >> >> You can use this UNIX script to download the release and verify the >> checklist below: >> https://gitbox.apache.org/repos/asf?p=incubator-openwhisk-release.git;a=blob_plain;f=tools/rcverify.sh;hb=HEAD >> >> Usage: >> curl -s >> "https://gitbox.apache.org/repos/asf?p=incubator-openwhisk-release.git;a=blob_plain;f=tools/rcverify.sh;hb=HEAD"; >> -o rcverify.sh >> chmod +x rcverify.sh >> rcverify.sh openwhisk-runtime-go 'OpenWhisk Runtime Go' 1.13.0-incubating rc2 >> >> Please vote to approve this release: >> >> [ ] +1 Approve the release >> [ ] 0 Don't care >> [ ] -1 Don't release, because ... >> >> Release verification checklist for reference: >> [ ] Download links are valid. >> [ ] Checksums and PGP signatures are valid. >> [ ] DISCLAIMER is included. >> [ ] Source code artifacts have correct names matching the current release. >> [ ] LICENSE and NOTICE files are correct for each OpenWhisk repository. >> [ ] All files have license headers if necessary. >> [ ] No compiled archives bundled in source archive. >> >> This majority vote is open for at least 72 hours. > > > > -- > Matt Sicker <[email protected]>
