sbp commented on issue #1430: URL: https://github.com/apache/tooling-trusted-releases/issues/1430#issuecomment-5036140987
@ascheman Hello, thanks for the report! For a temporary workaround, we already have the "RAT source excludes" field in the Compose tab in project settings. Regarding the specific proposal, we disallow anything other than `.atr*` and `.gitkeep` from being uploaded, and the latter is purely for compatibility. The expected path would therefore be `.atr/rat-excludes`. We'd probably have to write a custom resolver for the cache key, because `.atr/rat-excludes` changing would invalidate the check result. We did implement it before, but removed it because we felt that exclusions in archives were better. Is there a reason why this existing mechanism can't be used? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
