sbp commented on issue #1154: URL: https://github.com/apache/tooling-trusted-releases/issues/1154#issuecomment-4731552089
1. Comparing .tar.gz and .zip is a good idea, but we'd need to record executable bits. 2. No need to compute twice, we should just stick with rsync so we get the exact differences. We can just as easily apply the git export rules before running rsync. 3. Agreed. I'm made a non-Rust version using Dulwich. 4. Not sure about this, because we're not exporting Attestable data yet, by design. If we want to surface it, we'll have to decide where and why. I thought it'd just be in the UI for now. 5. What is the check, though? 6. This is probably the primary UI use case. 7. I think we should defer this, if we do it at all. Something we could add if explicitly asked for it. 8. Should be deferred. 9. Don't think we should do this. 10. This should probably be our canonical format output for now. 11. Okay, but do we need to think about git export canonicalisation here too? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
