sbp commented on issue #199: URL: https://github.com/apache/tooling-trusted-release/issues/199#issuecomment-3133028937
In 91060481163985aee42b13aefca3f80726324c85 we added a `.ignore` file for RAT checks, to resolve #153. We could use the same mechanism for our own license checks. We could allow adding and editing that file from the web interface, or we could move it to the database solely, as proposed in this issue. I think moving it to the database would probably be a good idea, but it would mean that people can't add it to their release and then rsync it. We could have an `.atr` directory for various metadata files (we have discussed allowing YAML to configure projects and releases), which could be automatically ignored for the purposes of publishing a release. The purpose of allowing the excludes list to be changed during the candidate phase is to prevent voters from rejecting a release because of false positive checks. Allowing updates to the excludes list during the candidate phase would be possible, but will probably incur quite a heavy refactoring cost. The reason is that checks only take place during the draft phase. When we get to the candidate phase, any change to any metadata could not reflect on checks that have already concluded and are immutable. It is important for them to be immutable because they form a kind of audit record. We want to allow changing that audit record here, but I think what we should change is the presentation. In other words, the tasks will not be modified, nor will they be run again; but the presentation of the check task results can be changed. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@tooling.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tooling.apache.org For additional commands, e-mail: dev-h...@tooling.apache.org
