andygrove opened a new issue, #6638: URL: https://github.com/apache/datafusion-comet/issues/6638
Comet currently maintains two Apache RAT configurations: the Maven plugin configuration used by CI and the standalone checker used for source release tarballs. Their exclusion lists and file coverage can drift, so a green CI check does not necessarily exercise the same artifact or policy as the release process. CI should create an unsigned source tarball from the checked-out commit and run the release RAT checker against it. The shared release scripts should fail closed when the RAT download, RAT execution, or report parsing fails. Removing the Maven-only path should also avoid the Maven bootstrap and plugin dependency downloads in preflight. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
