sbp commented on issue #998: URL: https://github.com/apache/tooling-trusted-releases/issues/998#issuecomment-4172523205
The core problem here was that we do not enforce phase validation at the write boundary, in the storage interface. I added that in ca216273282c090afca95e686be03d26064eb2d4. The audit tool wants us to add early validation, but in most cases this is now adequately handled by the storage interface validation. We could add early validation too, but this is expected to be the rare case and is only an optimisation, so it would turn out to be self-defeating. There are a couple of cases where earlier validation is necessary, however, and I added such validation for those in a50d92d9998eeaa36caeef146f0c29f68d75142e. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
